25729753150845a72fd452d6a3fa2504b183a35d95b8a84afab1176bbca12185f76d91ccd7e3299e318d8afea93a1822a3c406a7410f70e6b90d0b931be040c996e01143f8cdf220d678abda63ff47616f81b719668b7d"}, {0xf0, 0x10e, 0x60, "9a7b122b64eba231fa1b4f4605d36a2616d07356c22624bef5ac42f4f0459ac2632417a18a2c0560041aaa93cafbfba3514f102912715464db041e0fa1be867f1b8ddc3f2d782b2861ae29fbdcb2136b5800c6d6f99b6bb56ea975cad209466dca4dd519feef2e3d38c514376995fce4bea12f558e270c31c93480bc3aff73f5443842f1c0b64a995e6c7d1452d52cea13657dadaef13ea48f688c670de48442153caee6a960cff5d9709e31caaf9d0d1e72561ffd9bbdbf996e6f428869e074c41105906e4982f583b9a8899773e484969ee7efdb5ae7284e18"}, {0x88, 0x113, 0xfffffffc, "d619bd000c4ed277f39cb1b53c882a88f7f1f9b5e6b6096b8f8313f9a302f6103cf7532b9205dbf38895b6284affc4b15c43faab42de2dcad50ea0564cfeeaf63d962cae90d1130a201045a72e216bc8c037188209a9ffb006ccb06f96745614f64a3a0c61f54d515af015cb9f1f68bf02766a1834"}, {0x48, 0x110, 0x4, "7e43099c9e0638e94ceb2ce8dfd730b6b954045794c8b2966d07384a7fe38114e573d8f2cbc69f5f21f2feee3bca539519a81c2c2f61a1"}], 0x1350}}, {{&(0x7f00000026c0)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002740)="b37575", 0x3}, {&(0x7f0000002780)="19b9eb6c4e8470e13f24334efb02de067ba282b0c5f3cd2dc0240bfaf376976abe7e927526f4c207d7ecfaafa8deb575f805fc7a6986ad855f978aa135b82309e0c9d8b13ad764c7269cb613f8ea8befc6be82305a5c4ac89cb00cbabaee32e1a8b24b4df0c2546310cdb38ad36119628e0b739df63ee742a3e65a00d08edcb5e266bde5a303482a488fd09aa9eb31533e74214241416b117b81500a6e31bde516fb147a4770ed38b3071e57c5ac348b90decb845362347085687be9cf6a50571dd7e1f55da302fe49e1fa282ee6ad8f0cf779bae2bfb508713e5c7d9168ab8a9a8f0c938639", 0xe6}, {&(0x7f0000002880)="ead5411da871197b1809810e45d07dda585c7d15087073f7f2cba8fb6ba3f1ec19cd857ebb751a34efd3e95c7cc2a8a6535b9de4f8e79ca7abf810d7d125976140e145f9666bdca20070522c718d217455014d84d4c8c8da76b3ab6ba72a3ceeecfe9885b9fb39458faf82120acd3d37c5ce81c396f8a9621cdd7fcb171ce3370cf395249b63f7f2ae43ba9673b7d71cb8564afeb7e6b00175fb4ff8dd66365a05f308f46a5ae488e59333bbbdc148369662488e469ce790c69fa939333b21f8328abc99f144b78919f125b63fc318cab8e311e05b635dd590a27ce1975cdfb3649545bede0aa6a41bc2d732f4cfb18e1af405483e2c", 0xf6}], 0x3}}], 0x3, 0x24049044) close_range(r0, 0xffffffffffffffff, 0x0) 15:20:01 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x4d}, 0x1}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) recvfrom(r1, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="3a0d00000000000007200000000006c98754050000000000000004000000000000000200000000000000c910200100000000000000000000000000000738000000010c04620f010000000000000000000000000005000000008c0000090000000000000001000000000000000000a7ed12ab017620ae6caf5a1007d6ee1e41194d8f00"/140], 0x78) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)=ANY=[@ANYBLOB="080000000200000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bind$packet(r2, &(0x7f0000002100)={0x11, 0x16, r3, 0x1, 0x9}, 0x14) setsockopt$sock_int(r4, 0x1, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x1, @mcast1, 0x8}, 0x1c) 15:20:01 executing program 7: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0xfffffdef) 15:20:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 2) 15:20:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 20) 15:20:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) 15:20:01 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = eventfd(0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x420, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}, {@cache_loose}], [{@smackfsfloor={'smackfsfloor', 0x3d, '-!%@*\xc8:{\'(}$*'}}, {@euid_gt={'euid>', r3}}, {@dont_measure}, {@measure}, {@appraise_type}, {@fsname}, {@subj_role={'subj_role', 0x3d, '-*'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) [ 801.110821] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 801.142661] audit: type=1326 audit(1661959201.320:53): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5953 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18bc35db19 code=0x0 15:20:01 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0xc00e0000, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:20:01 executing program 0: clock_getres(0x6, &(0x7f0000001600)) r0 = socket$inet6(0xa, 0x4, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000000080)="e53cc9a1da10645519", 0x9}, {&(0x7f0000001100)="6326071ac902d4cfcfa8bfa851c9ce5e1d58e7e77148e17525bd5a912340c41f174e9b41a7290b8a9ba8176e794a3a08b5632630a2bcf7c52de9399455f1ffb5763a92a998401ab3f360c88b33c08287f31f2ce311c3cdfeb4668044c5db02caac98a6d4d93a2d045b3228937a51b3f86c1ba36af7cabafac736ff0a2eb5fedd2d6742ac69cfa656a6f9d1a3aaa1a4b10be4fca1a2f62dc514cd15c28bb6e56d77fcae3a1f8f8a2017471b2f502a21be91a9ea9bf17be8b198367eb2edc9d085995c3d29fd4149af4d4dedf2d17c12bbbe403de9b9568d6aa5a7f1783d68c39ec210640c11e9f26117cdcc68be23faf9b63b22", 0xf3}, {&(0x7f0000001200)="321127ba4ec9a7dde688e05debb36b611f7308b120c539eb67e50f79fd52aa007904b046c982f4b8d9be5df46dc9e8ef9160", 0x32}, {&(0x7f0000001240)="4e3ba7813dc62973029f0a1c3558fb6679df20a2a5ed08745fedd01ea1257c10adce970bb54fabefa953fc26503a820d5460cb252fe21d503e1da16cc53fd6273b2165eb3acfb2edbecf39ce7596671f95e92987a33a3ea94c36", 0x5a}, {&(0x7f00000012c0)="1209b345fe06447508c70132d318c5eb01419e6b058a0dd261bf2d40777fcea47daf3a5984b53124099d892d720ec424d88174eabd218b2f66f7ec3b42e32f688c00452090f82249e8304f28c6ca2281313975ea91bc51294269fe6308a19351f2a641a27afabdf3480153e4ca941111a2fb0b0fb253e06d5d39880c0a1d703651fca312db8322", 0x87}], 0x6, &(0x7f0000001400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x89}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @remote}}}], 0x38}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001640)="b1ba333ba55a6a38bb35cfb16b9ff296333745a003f55b41a329fb2f00f942a486aa4582fc46a2ad8312599cb771f8b18ad129a5c48b6edc57c5b9ac28cbf5f9fa2a5e1d2f294388ca04c287ff1791829a674b7ce58503886af494e8dbc46a1eae", 0x61}], 0x1, &(0x7f0000001500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}], 0x3, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:20:01 executing program 7: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0xfffffdef) 15:20:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 3) 15:20:01 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x13) 15:20:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 21) [ 801.319948] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 801.355548] FAULT_INJECTION: forcing a failure. [ 801.355548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.357355] CPU: 0 PID: 5974 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 801.358541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 801.360167] Call Trace: [ 801.360568] [ 801.360923] dump_stack_lvl+0x8b/0xb3 [ 801.361513] should_fail.cold+0x5/0xa [ 801.362098] _copy_from_user+0x2a/0x170 [ 801.362704] memdup_user+0x6e/0xd0 [ 801.363251] strndup_user+0x74/0xe0 [ 801.363823] __x64_sys_mount+0x133/0x300 [ 801.364447] ? path_mount+0x1e20/0x1e20 [ 801.365053] ? syscall_enter_from_user_mode+0x1d/0x50 [ 801.365864] ? syscall_enter_from_user_mode+0x1d/0x50 [ 801.366669] do_syscall_64+0x3b/0x90 [ 801.367242] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 801.368018] RIP: 0033:0x7f4827e8ab19 [ 801.368584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 801.371267] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 801.372408] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 801.373456] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 801.374511] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 801.375559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.376600] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 801.377674] 15:20:01 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0xf0ffffff, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:20:01 executing program 7: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0xfffffdef) 15:20:01 executing program 5: ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) [ 801.561846] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:20:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 4) 15:20:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) 15:20:16 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x4d}, 0x1}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) recvfrom(r1, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="3a0d00000000000007200000000006c98754050000000000000004000000000000000200000000000000c910200100000000000000000000000000000738000000010c04620f010000000000000000000000000005000000008c0000090000000000000001000000000000000000a7ed12ab017620ae6caf5a1007d6ee1e41194d8f00"/140], 0x78) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)=ANY=[@ANYBLOB="080000000200000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bind$packet(r2, &(0x7f0000002100)={0x11, 0x16, r3, 0x1, 0x9}, 0x14) setsockopt$sock_int(r4, 0x1, 0x13, &(0x7f0000000100)=0x1, 0x4) 15:20:16 executing program 7: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000002a80)={0x0, 0xec, 0x2e}, &(0x7f0000002c80)=ANY=[@ANYBLOB="656e633d6f6165703e686173683d626c616b6532732d3232342d783836000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b841fd42bb7f635512da724c6f8ae72acdf2087edef035123f2"], &(0x7f0000002b40)="050842f724031971aaa455f265a58d3e60d3567159eac9a41c43668029c0de84afc4f15d01a00338f755a7a6f69689fa489dbc8215b9f6529fccf4bd8ad6b299eeeacf3fa16173a1d6a014f230fbfd0782eb0c626b14c984a19c744ce4cda2739845dd084206e60bbc062176842369ae597b8fc41768fe28b32cdfb5fdf064d5a562c6cde5a628c117733bae6096cd0a1f84e8e5edaa5a33193563a513f6f90684fbd8d105ec45aaccd2ed69d566e2e70aa3d4e57d43b673f9bef169492e99bbc8d9ffc60d6565d49a94ec0d610165db7a1e18405fb59ef07a926ac9df70a483e72c53b86224ab3e42433017", &(0x7f0000002c40)=""/46) r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) sendmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="b159763cdc94cbab1b59e38121", 0xd}], 0x1}}, {{&(0x7f0000000100)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000180)="4c987ed29652f13207888d3f8554ed6f9c25e0c1d07baf74043604fcd9e3aff5e6f37c4bf190e523e4201304dec48baf91e2dc2990", 0x35}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="44c1edcf5d2ad3a7b40c36f2c1e43edb9276897e3b78cad4d757f1b1", 0x1c}, {&(0x7f0000001200)="4a6636b3551b6bdbdcb1db5c513f91e9131e2e9b79f815061672ba13bc2dc2fd6599ad8f13cf179cf12319cbfe76b75da09ec07ee2fe88", 0x37}, {&(0x7f0000001240)="65a7d4f1435ce1c3d66df2e948978afc76de753148ed533c5ce10fefdc66aa84f6d68d4dfb48e7d63be0e76c81342ae3ee175f1b9b17fd57182cc19fbb162d4726e63f", 0x43}], 0x5, &(0x7f0000001340)=[{0xf0, 0x118, 0x10000, "7cf7b8970097c824373ced8b4e4aa1c3f21bb871d56de518b0afccdaa452915e4edccbdd7536befc2cee97b91454e89c623eca87e85dac5b3f999ad07d0d615d5b89cc72c9664438edd948dad24c8c8c4d162377dc7a3c1cdec5e77d074f5ec40f21a5005ba6560293459d8ab2d55a360602834487ca7936873a0cb7748f5c877598cf42a672dc62a52035267587e525b6e22910a69fc0b1d25cb704e5b4a96c50f6b9fb101d8c11ba641cba16c35cf00786e6c5d1ff09c3a671dac9e342870a49b86139557c36f83961ee4b438c3be8e3d499a02290dc6bba8c90"}, {0x1010, 0x118, 0xb139, "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"}, {0x90, 0xadc2e78bc7321916, 0x6a, "6f95857984e16841061e464190736e5d9379aa529e3748713f280b306f14c006ae0d618eae699ba9c525729753150845a72fd452d6a3fa2504b183a35d95b8a84afab1176bbca12185f76d91ccd7e3299e318d8afea93a1822a3c406a7410f70e6b90d0b931be040c996e01143f8cdf220d678abda63ff47616f81b719668b7d"}, {0xf0, 0x10e, 0x60, "9a7b122b64eba231fa1b4f4605d36a2616d07356c22624bef5ac42f4f0459ac2632417a18a2c0560041aaa93cafbfba3514f102912715464db041e0fa1be867f1b8ddc3f2d782b2861ae29fbdcb2136b5800c6d6f99b6bb56ea975cad209466dca4dd519feef2e3d38c514376995fce4bea12f558e270c31c93480bc3aff73f5443842f1c0b64a995e6c7d1452d52cea13657dadaef13ea48f688c670de48442153caee6a960cff5d9709e31caaf9d0d1e72561ffd9bbdbf996e6f428869e074c41105906e4982f583b9a8899773e484969ee7efdb5ae7284e18"}, {0x88, 0x113, 0xfffffffc, "d619bd000c4ed277f39cb1b53c882a88f7f1f9b5e6b6096b8f8313f9a302f6103cf7532b9205dbf38895b6284affc4b15c43faab42de2dcad50ea0564cfeeaf63d962cae90d1130a201045a72e216bc8c037188209a9ffb006ccb06f96745614f64a3a0c61f54d515af015cb9f1f68bf02766a1834"}, {0x48, 0x110, 0x4, "7e43099c9e0638e94ceb2ce8dfd730b6b954045794c8b2966d07384a7fe38114e573d8f2cbc69f5f21f2feee3bca539519a81c2c2f61a1"}], 0x1350}}, {{&(0x7f00000026c0)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002740)="b37575", 0x3}, {&(0x7f0000002780)="19b9eb6c4e8470e13f24334efb02de067ba282b0c5f3cd2dc0240bfaf376976abe7e927526f4c207d7ecfaafa8deb575f805fc7a6986ad855f978aa135b82309e0c9d8b13ad764c7269cb613f8ea8befc6be82305a5c4ac89cb00cbabaee32e1a8b24b4df0c2546310cdb38ad36119628e0b739df63ee742a3e65a00d08edcb5e266bde5a303482a488fd09aa9eb31533e74214241416b117b81500a6e31bde516fb147a4770ed38b3071e57c5ac348b90decb845362347085687be9cf6a50571dd7e1f55da302fe49e1fa282ee6ad8f0cf779bae2bfb508713e5c7d9168ab8a9a8f0c938639", 0xe6}, {&(0x7f0000002880)="ead5411da871197b1809810e45d07dda585c7d15087073f7f2cba8fb6ba3f1ec19cd857ebb751a34efd3e95c7cc2a8a6535b9de4f8e79ca7abf810d7d125976140e145f9666bdca20070522c718d217455014d84d4c8c8da76b3ab6ba72a3ceeecfe9885b9fb39458faf82120acd3d37c5ce81c396f8a9621cdd7fcb171ce3370cf395249b63f7f2ae43ba9673b7d71cb8564afeb7e6b00175fb4ff8dd66365a05f308f46a5ae488e59333bbbdc148369662488e469ce790c69fa939333b21f8328abc99f144b78919f125b63fc318cab8e311e05b635dd590a27ce1975cdfb3649545bede0aa6a41bc2d732f4cfb18e1af405483e2c", 0xf6}], 0x3}}], 0x3, 0x24049044) close_range(r0, 0xffffffffffffffff, 0x0) [ 816.748374] audit: type=1326 audit(1661959216.926:54): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6007 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18bc35db19 code=0x0 [ 816.760087] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 816.774158] loop5: detected capacity change from 0 to 264192 15:20:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 22) 15:20:16 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0xffffe000, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:20:16 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0/file0\x00'}) write$P9_RFSYNC(r2, &(0x7f0000000540)={0x7, 0x33, 0x2}, 0x7) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r3 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x100000001, 0x2, &(0x7f0000000240)=[{&(0x7f0000000680)="8100ff7937b28c79eb7e6bc4f64888eb46d6fff57519be3fa018a7e08512e9490b2cb48a31d0fd665d810c39c1ecd29300d1d8ac3e1dddd4c21dd7ab59ae05f3494e1192d169840a41ae6e090a8947c21226295a8110d1a8cb4042be4c41459c159761f3168be6735b7c2fbf9fdf7dbeba560257ee6cb634e37b45cd6ed1f3fcbb6fb461cfb28193b8b3d7695196f50a4d0edb0cfb561242ac078abed877502f43e056236cb23f18d981cde7e5b59abf566f15650345385ae471b9a49e88b45167a0f4e36ce568ac65e67d01fb82c94c74c238101e352450e612195e1c10b42155287f84e363545da5cd176551a1a29d89a851405dd807f578eff67f14f26ef470d11c01129ac1c657580626cabf621667a4c6cfe5a2d424a056e94573b24ad3dee9ae74d7ea3a7447aa0e64e4c485829807c0e8df339eaa094c06f91a45b1390dceebd7e78394e26e0f23a278b79f4661441336f1f00226333d468a0ef9de70da5134b667b189b7f1fa92136c9d23e8a027f2b558a758af31d39d4309de4e3e6baaf0a22c6df21b0de69143be05cd7dcfe8e0ac1fc7d0dcf0383afd8252eb5a0f71733d4db91df51b77081e9953c6e16e4b71d86ffe944238963cb2c27dde897282c7235283db274b4ef9a14804c637e8b6c7bc830b93727c5a3822837a28ce60369692148cca5f314ba62a0956e8a6ada7f98b66dc9e278ec73cbcd8fc78bf03f91867835ab901722bb48254beedf8ad7b130eb5641d02e1f46ea710c488953f481c6e7180477a41a7411541054292df608abafc3194c1ee1966b50fa9b2e1822d904b9a004e9460212209916f2248fa047a76ce59725b626099e7a7e656214660bd4ae87e6aeda59f013cd297e42447da47a9cf26f12ad098da172656e72e1555b12385550eb6313e0d5e30dc724e0f43572ebf0a41b538e591ebf2c4f816cbe07bb216a3d1128a5e424586c914fe8138cbf54e1e61e8365d365460dff0dc78d03e87645671f0be6855dc92403b98e075dab68f08b7bfa2901c68723b0182a79d18966e049e4c2554c48ab8788575dd3b4292e926cf7767bb097ea159852b8704ca653ea5f477a85caf227172bccf2e185e1badbcb49d732bcf520b08105498a25f7ff31e1182e85ff66a2ada10fd5878583aa495d02d8c5b055d25f62798bb5ee46e1d518f398e067fb857b1463c89d46eed23a1f6c78356a037fc0063931916068c10901fcab3688664a609fcbec50d30a2edbda20a448ee575ef1d6bc30df64e1e930a9a38d5defdbedcacd88035d63e905624001802383828a3e1167f1cfb1a3eb154ecafc55b8709a2910a595bdf166ca318ca054fd1e9513f653aef50b5ef33a7d7d553e2c871a2f283c891036a85962fbd06a3c45bac5fbae17ea742d01707238224c5a534d3da6d3fb9d06a874a375e3fe08f85605246dca4d394e750798f4b061ceaef6fdaa3d2683af476f9dd3a63d3e82d0de50e71a04ffc2f51f53cb09f89e300eb6ccd1856d140f90b605ee28b87908ddd21817ae552a87133ee0a6dc76ef5017833850eb30d9dd43fb4ea4a4abc781d01cbc257b4d0704a35a13cf147dca268f237d8f4f6e9f8110f2d24bbf12d9201bf221097282f9f3b06e17ca2223437e4b285a4267a31b04a2398b04a5027cc89523b940d678f8d5badc521d891a5b860392542ca97c62910849771e99824af4e105f432ef0f9b350ba1829ffea0d056fa4510ebbe9248a81ca975fbe599801a5ecbde098f8d9b2dde7b48e0aec3d7338e1d1badc3c2c308eeb9afed71164385daa3620c59e665684b1e63a60db30526bedc7a5d90ff1a355cdb346c7aeadef534825c33a82c244b2c4b5804190d5c3a69663c1a1b2dce7dca42cabcbb95748869008d43f535853e79724f7cde62ad3b6e2a1ab39f26ac885ad7681f39496e65cbd82b12768393825d80a1a28f03e33217ab0ee34ca719f9f6394bdeaaefc7a1594c28ae4fd073e90b46ead18d902b07a60b68c3a71382cf7b45f1c2038f361c440b8e3c91ca1ca6ba90706ce9ce0615b90d1f4ecbeaecc162f1cb34479886c3cb7d95d3ecafb5943278a248279b8ee63b796c3ea38ecb7785eebbb16bd8d1849fe89c6fdd954e7987819b6f2c9f3d0d684ea7bbc44d159e7b32545e42fec55767019f95ebd52ac4d8a06d9af2cfe14fdb83140c357a8bfb164c852dd78a535a23dd619e43e4ae1f30bbce6ed9f8300d21cbac8b6be4a54471d494baffe9678870242c37c8331832aacbc33cf4edd1cedba64e2417f0c28be6fe15b550dc7b9581634e787dec6ffb0d62606ccfab181d5cb97258390a32daf1eb5447dfbd86c410688228e84c6a0f0949f455c7391fc658161dbe1b53d0049f1125138a06a908d9ce130718d19aa60e6becce38e2df4d9f7c5c797d6ba7509209352518b15fe62275329a9bc2ff801b86c0efa201cf05f7390ce5427c20c68714c4615b00cb9ae85c72deb19d728bd5ada8dde4bf572cacfa2b0412f899f0a302964071a967d231219f7e34cd12d07add4fdd78ae74d8e9cb3e49024e76230e4fcef71d4dc4d245cfc6031bc0af97aca8dc83deb7e15d9f34b920208c8cbac8a6a7b3f85a129ed8ffc53c08f70283bfcab5438ed72ce5a59bc1fffa8b3bf6ec5aa934534863ac724db2a81a7d691d9a4a94237855f32a620bc0df779811bcc631ceeb47ae904cafb8fd2a846d555f2649ef7d553bf7f02a5c82ad46a6ca2451d406bfeb3bb178c6e56a12e390924976de8e038627420722e471b22dc559e57d767b26079758ab15ca9ed2fd00fdf4e143abc438fbe3678131587f31a5bcf5c967556bcf69a328522fe74cb5b6553c1d71e64201760861a6411029f2446cfdc1c76fac5d1acb9b283b26bcde2f9f5491236f700e77cf10df40605b59118e85c246019775ff6230568f9f2ae8c7e2b89ba087e6929c23f04bb20e6981d7383576585a485cb03c81363ba496c57f06044c5415d45335678add70ab99792e957dc604290832442e83f74531add5154004a749e5ac0434884f3f8659e81296788f5a2f787bbddbb026f7d39a14b415b74268949098e377bbb2084c34590f39a1d733baf4ef66ccb4682456844ad06ed974f01510fb9dcd0a9d2f15097213b61c79379c93eedff1ccd36a616cff9e9db05747edd33ac11fa4b5549812c7dd2febefd0459b8b81cfc003d0135a30cb9ba4c63fbdbd1c94ef300b4e7fddf2a085baf44d32857058aa7ed22fb94838fb8cea7b59be85989f3c686b1784a494287580316dc65878215e6df18601dafc2e58a1aa1c9325b3a9450569795364d1a7199e69cd6011d2f75e371c4cce90b00704530dd32f264ef7a3ece97b613fb79f6f6fa916d294878dbb0798ac6ceed0569bff105b15e1a1a6b72d185f358e43fc4b484e44664102e9c916de0f059965a8c23e152836a357239f294f6bb103ca9140d07ff9105898f2f61684a1dd884d5011bd5191f90e83b683b26a03e6467ed61c65c5cfa959643401797cead1bd13ff8cd3b6c3dbb01c44d32c3edf3b40d487b04a869916c92ae9615c446e51c2a735228f0229bfc2e0b779bfea5052c0a0e785c0069a467da8585667f6e0a892c18332df31d2db460ba79aa1a1b6a17b75fe557267f1c4d49d2fe7d78e25a65791a5166a7185099a817414c5ef22de810ca1db4e6b0161fee52d5c6d679950a01a980c45abebb3b21358ffcfdd5d6ce8830463f224d532cb8359b34f1514a21e0de73eb400dc765292ff4ccbd6d91cc847f1e521c1566cad579118e77397fe50770bdf03e3fedc5cd39f1db952900d6f2b3cd107b46d727ef00760205f7b0057c939a7551cc40ee4abce5a70e3f55d67016be59f7365caf130c7e517b9af35941b9426110d0fb5455da8cc40b90334c9dfba680c3dd64c476de7f4fa2402794004fa4ef2b31b29bfaca295236490a2bad1d0d6f9b2cd2eaf29bd7be1d440e4ad910fc0fac02bbb421b7552f3870bfa2ab6879fbc06de76ba160d646e1c0323911a03bebcca45c50fa5acd49d3c26487e34c181063ab710851c51442896027d1f4ca856a18e28ce8e93c45d67abd76743409052f082de61340abdd7c1ff96a5a5e41feeef4bd36acb5abfb22e5699c9464673677011c724fe83f16d3e51e8b418e6a0938f3e547c1046aca68260c70cdff7809a48c14400af4421c62a061120cd662f9feedad393c176a3e449abb0bac7f738a9406bef58866256c5f32d50d43dcd9d5b05ea89476ca7e7e50d76ef3d799066dc74657340b83f26bf9a5fbe9caa6291f88d246489936b0d013455d51633e145cabefbc363c2a2a2b919d53218e00ae38e389babcba265bd6fd5e5ca875373bd6586ba69751f761ceecfde68c91e1a335b568fe28e82fef929934d47540828ca5e3545d10effe91709190b8de8efa36740932ffa7a013c86012e88f8c32df6c2785d4bd4a676d6fa2c5458447a38c6836f84d36e247cdba56f798891021b94398246d110b7f7fb429740440cf15afb5cddd8f52b51b67298b74c613069c0bac1ef0e909043613da30a0e1bc177176803c6362484f6240833e1a3876309b3c1da21b4b41d9f271b29e2f96e5ddeb8af25ecaa2ce231fb85bf22acdc4a191c2fa2cf2c5c5736af0dc0df68a5654fa4856f6ac06331d024475cd0023a6d1db7e74399acfaa6e3899adb2d60bf662cef6d889ae772fab81f810d139d0f22a91a5bf083019e66ad0c7a4ad529852b6ea2f799de72966fbed2b8426d97c3032298d8823f893ccc29fc7ae3e34da5c68758f267cd11507f80bb927e3a7db9ae38cac08a6103505e99a3beb867e57f6da6642dc7bd3878f716b1fc39edb350426f20b0663f76535a183a7a40137b8cac222c2f52e64c9ca6106da4cfefc3669c7b362c8c63089005a06e07b6c15d5eee5fa66901637d376f2ee7358b0aa5e57304c7b7baf4591485b900d1d005e13a2d08edc3b0c96d981ee8f9e6dd5849932794153c16960e7141e0b5ece2ed848580630fbcc331fd70d8678d4ba443403fa24547251fb83c1473e124461d86d6235b2a83e7772274709e685a2d8f14d9217a3e141816c906d6db812a7646f040fdd36076b7b6f67d8ae5d344e46f584c08b2a50f19d40e33e5e727ee0967ecbd566fbd953ac10f53edb65f94f97c284922cbfa78aecd16c8d4c432235e4b880fbfc29e43be4eb2fcbf1c00ff512e8e5db006c12a11934e77a1fe069cdeeaf9bc2c296089540bbccf68e1ed1723a3e350c2d0a45ae68d983c1d9b95f974ade8eb414f7c2e9d6d1f83031a16ecf418e54a56120c5668e16eaf41edd605d161df62fa5fbbdb4b274fd7b7390294a641598e724c48ad2756079a7e4006d43c8e2d9c4694829f7209ff9b39c308535e943f5eb4ef412dc1abd1c29dc449a52055a25f01a6c9ad4aeb55dcc10a97f96837c10e493d1efc6e193be6821fc58374108883270022dd4a04b0f5e908c706d998e3cc8b16ff902976d352c4c194d105c3c7fdb158572a7e84947175b60b7f4ad97a171a642794e8d46e0a0ac13fea6026ece7bf4fab67f149b499b39ce3b33071e8973258ecfa44315051635c187b4a365813792ea9b8b3e005d4e750d0cedf3c82cccf5eb2390b9384e98b82de57fb16e199175a39a6b2b39ef8abae573877af2b92998a0a3ca8fe707fe19cbdd5a55c0e54b7fc763a1e2629d7a6689fd23fbf253fb569706c318a9da321df737ce4b9bcd63aa46868000da294409", 0xfe0, 0x483e}, {&(0x7f0000000200)="84f446a627a0b79c96e18fb3b522ae2bd2776c4056b0", 0x16, 0x8}], 0x41400, &(0x7f0000000300)=ANY=[@ANYBLOB='check=strict,dots,dots,dmask=000000000000000001736\"1,measur,rootcontext=uncned_u,hash,uid=', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=vfat\x00,pcr=00000000000000000025,\x00']) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x902, 0x100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r10, @ANYRES32=r6, @ANYRES32=r9, @ANYRESHEX=r8, @ANYRES64, @ANYRESOCT, @ANYRES64=r7, @ANYRES32, @ANYRESOCT]) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x2, 0x8e, 0x3f, 0x0, 0x5, 0x2000, 0x1a, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7, 0x6}, 0x12005, 0x1, 0x80, 0x4, 0xf4, 0x7ff, 0x8, 0x0, 0x4, 0x0, 0x7fffffff}, r7, 0x2, r4, 0x2) statx(r3, &(0x7f0000000040)='./file0/file0\x00', 0x2000, 0x200, &(0x7f00000003c0)) 15:20:16 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @broadcast}, 0x10) [ 816.996230] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="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", 0x1000, 0x20000000, &(0x7f0000000000)={0x11, 0x1f, r4, 0x1, 0xc9, 0x6, @remote}, 0x14) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:20:17 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0xfffff000, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:20:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 5) 15:20:17 executing program 7: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000002a80)={0x0, 0xec, 0x2e}, &(0x7f0000002c80)=ANY=[@ANYBLOB="656e633d6f6165703e686173683d626c616b6532732d3232342d783836000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b841fd42bb7f635512da724c6f8ae72acdf2087edef035123f2"], &(0x7f0000002b40)="050842f724031971aaa455f265a58d3e60d3567159eac9a41c43668029c0de84afc4f15d01a00338f755a7a6f69689fa489dbc8215b9f6529fccf4bd8ad6b299eeeacf3fa16173a1d6a014f230fbfd0782eb0c626b14c984a19c744ce4cda2739845dd084206e60bbc062176842369ae597b8fc41768fe28b32cdfb5fdf064d5a562c6cde5a628c117733bae6096cd0a1f84e8e5edaa5a33193563a513f6f90684fbd8d105ec45aaccd2ed69d566e2e70aa3d4e57d43b673f9bef169492e99bbc8d9ffc60d6565d49a94ec0d610165db7a1e18405fb59ef07a926ac9df70a483e72c53b86224ab3e42433017", &(0x7f0000002c40)=""/46) r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) sendmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="b159763cdc94cbab1b59e38121", 0xd}], 0x1}}, {{&(0x7f0000000100)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000180)="4c987ed29652f13207888d3f8554ed6f9c25e0c1d07baf74043604fcd9e3aff5e6f37c4bf190e523e4201304dec48baf91e2dc2990", 0x35}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="44c1edcf5d2ad3a7b40c36f2c1e43edb9276897e3b78cad4d757f1b1", 0x1c}, {&(0x7f0000001200)="4a6636b3551b6bdbdcb1db5c513f91e9131e2e9b79f815061672ba13bc2dc2fd6599ad8f13cf179cf12319cbfe76b75da09ec07ee2fe88", 0x37}, {&(0x7f0000001240)="65a7d4f1435ce1c3d66df2e948978afc76de753148ed533c5ce10fefdc66aa84f6d68d4dfb48e7d63be0e76c81342ae3ee175f1b9b17fd57182cc19fbb162d4726e63f", 0x43}], 0x5, &(0x7f0000001340)=[{0xf0, 0x118, 0x10000, "7cf7b8970097c824373ced8b4e4aa1c3f21bb871d56de518b0afccdaa452915e4edccbdd7536befc2cee97b91454e89c623eca87e85dac5b3f999ad07d0d615d5b89cc72c9664438edd948dad24c8c8c4d162377dc7a3c1cdec5e77d074f5ec40f21a5005ba6560293459d8ab2d55a360602834487ca7936873a0cb7748f5c877598cf42a672dc62a52035267587e525b6e22910a69fc0b1d25cb704e5b4a96c50f6b9fb101d8c11ba641cba16c35cf00786e6c5d1ff09c3a671dac9e342870a49b86139557c36f83961ee4b438c3be8e3d499a02290dc6bba8c90"}, {0x1010, 0x118, 0xb139, "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"}, {0x90, 0xadc2e78bc7321916, 0x6a, "6f95857984e16841061e464190736e5d9379aa529e3748713f280b306f14c006ae0d618eae699ba9c525729753150845a72fd452d6a3fa2504b183a35d95b8a84afab1176bbca12185f76d91ccd7e3299e318d8afea93a1822a3c406a7410f70e6b90d0b931be040c996e01143f8cdf220d678abda63ff47616f81b719668b7d"}, {0xf0, 0x10e, 0x60, "9a7b122b64eba231fa1b4f4605d36a2616d07356c22624bef5ac42f4f0459ac2632417a18a2c0560041aaa93cafbfba3514f102912715464db041e0fa1be867f1b8ddc3f2d782b2861ae29fbdcb2136b5800c6d6f99b6bb56ea975cad209466dca4dd519feef2e3d38c514376995fce4bea12f558e270c31c93480bc3aff73f5443842f1c0b64a995e6c7d1452d52cea13657dadaef13ea48f688c670de48442153caee6a960cff5d9709e31caaf9d0d1e72561ffd9bbdbf996e6f428869e074c41105906e4982f583b9a8899773e484969ee7efdb5ae7284e18"}, {0x88, 0x113, 0xfffffffc, "d619bd000c4ed277f39cb1b53c882a88f7f1f9b5e6b6096b8f8313f9a302f6103cf7532b9205dbf38895b6284affc4b15c43faab42de2dcad50ea0564cfeeaf63d962cae90d1130a201045a72e216bc8c037188209a9ffb006ccb06f96745614f64a3a0c61f54d515af015cb9f1f68bf02766a1834"}, {0x48, 0x110, 0x4, "7e43099c9e0638e94ceb2ce8dfd730b6b954045794c8b2966d07384a7fe38114e573d8f2cbc69f5f21f2feee3bca539519a81c2c2f61a1"}], 0x1350}}, {{&(0x7f00000026c0)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002740)="b37575", 0x3}, {&(0x7f0000002780)="19b9eb6c4e8470e13f24334efb02de067ba282b0c5f3cd2dc0240bfaf376976abe7e927526f4c207d7ecfaafa8deb575f805fc7a6986ad855f978aa135b82309e0c9d8b13ad764c7269cb613f8ea8befc6be82305a5c4ac89cb00cbabaee32e1a8b24b4df0c2546310cdb38ad36119628e0b739df63ee742a3e65a00d08edcb5e266bde5a303482a488fd09aa9eb31533e74214241416b117b81500a6e31bde516fb147a4770ed38b3071e57c5ac348b90decb845362347085687be9cf6a50571dd7e1f55da302fe49e1fa282ee6ad8f0cf779bae2bfb508713e5c7d9168ab8a9a8f0c938639", 0xe6}, {&(0x7f0000002880)="ead5411da871197b1809810e45d07dda585c7d15087073f7f2cba8fb6ba3f1ec19cd857ebb751a34efd3e95c7cc2a8a6535b9de4f8e79ca7abf810d7d125976140e145f9666bdca20070522c718d217455014d84d4c8c8da76b3ab6ba72a3ceeecfe9885b9fb39458faf82120acd3d37c5ce81c396f8a9621cdd7fcb171ce3370cf395249b63f7f2ae43ba9673b7d71cb8564afeb7e6b00175fb4ff8dd66365a05f308f46a5ae488e59333bbbdc148369662488e469ce790c69fa939333b21f8328abc99f144b78919f125b63fc318cab8e311e05b635dd590a27ce1975cdfb3649545bede0aa6a41bc2d732f4cfb18e1af405483e2c", 0xf6}], 0x3}}], 0x3, 0x24049044) close_range(r0, 0xffffffffffffffff, 0x0) [ 817.078717] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:20:17 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0xffffff7f, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:20:17 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) r4 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xb) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', r3, 0x29, 0x7, 0xef, 0x8000, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x40, 0x40, 0x359db70c}}) close_range(r0, 0xffffffffffffffff, 0x0) 15:20:17 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0xffffff9e, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 817.226211] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:20:29 executing program 7: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0/file0\x00'}) write$P9_RFSYNC(r2, &(0x7f0000000540)={0x7, 0x33, 0x2}, 0x7) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r3 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x100000001, 0x2, &(0x7f0000000240)=[{&(0x7f0000000680)="8100ff7937b28c79eb7e6bc4f64888eb46d6fff57519be3fa018a7e08512e9490b2cb48a31d0fd665d810c39c1ecd29300d1d8ac3e1dddd4c21dd7ab59ae05f3494e1192d169840a41ae6e090a8947c21226295a8110d1a8cb4042be4c41459c159761f3168be6735b7c2fbf9fdf7dbeba560257ee6cb634e37b45cd6ed1f3fcbb6fb461cfb28193b8b3d7695196f50a4d0edb0cfb561242ac078abed877502f43e056236cb23f18d981cde7e5b59abf566f15650345385ae471b9a49e88b45167a0f4e36ce568ac65e67d01fb82c94c74c238101e352450e612195e1c10b42155287f84e363545da5cd176551a1a29d89a851405dd807f578eff67f14f26ef470d11c01129ac1c657580626cabf621667a4c6cfe5a2d424a056e94573b24ad3dee9ae74d7ea3a7447aa0e64e4c485829807c0e8df339eaa094c06f91a45b1390dceebd7e78394e26e0f23a278b79f4661441336f1f00226333d468a0ef9de70da5134b667b189b7f1fa92136c9d23e8a027f2b558a758af31d39d4309de4e3e6baaf0a22c6df21b0de69143be05cd7dcfe8e0ac1fc7d0dcf0383afd8252eb5a0f71733d4db91df51b77081e9953c6e16e4b71d86ffe944238963cb2c27dde897282c7235283db274b4ef9a14804c637e8b6c7bc830b93727c5a3822837a28ce60369692148cca5f314ba62a0956e8a6ada7f98b66dc9e278ec73cbcd8fc78bf03f91867835ab901722bb48254beedf8ad7b130eb5641d02e1f46ea710c488953f481c6e7180477a41a7411541054292df608abafc3194c1ee1966b50fa9b2e1822d904b9a004e9460212209916f2248fa047a76ce59725b626099e7a7e656214660bd4ae87e6aeda59f013cd297e42447da47a9cf26f12ad098da172656e72e1555b12385550eb6313e0d5e30dc724e0f43572ebf0a41b538e591ebf2c4f816cbe07bb216a3d1128a5e424586c914fe8138cbf54e1e61e8365d365460dff0dc78d03e87645671f0be6855dc92403b98e075dab68f08b7bfa2901c68723b0182a79d18966e049e4c2554c48ab8788575dd3b4292e926cf7767bb097ea159852b8704ca653ea5f477a85caf227172bccf2e185e1badbcb49d732bcf520b08105498a25f7ff31e1182e85ff66a2ada10fd5878583aa495d02d8c5b055d25f62798bb5ee46e1d518f398e067fb857b1463c89d46eed23a1f6c78356a037fc0063931916068c10901fcab3688664a609fcbec50d30a2edbda20a448ee575ef1d6bc30df64e1e930a9a38d5defdbedcacd88035d63e905624001802383828a3e1167f1cfb1a3eb154ecafc55b8709a2910a595bdf166ca318ca054fd1e9513f653aef50b5ef33a7d7d553e2c871a2f283c891036a85962fbd06a3c45bac5fbae17ea742d01707238224c5a534d3da6d3fb9d06a874a375e3fe08f85605246dca4d394e750798f4b061ceaef6fdaa3d2683af476f9dd3a63d3e82d0de50e71a04ffc2f51f53cb09f89e300eb6ccd1856d140f90b605ee28b87908ddd21817ae552a87133ee0a6dc76ef5017833850eb30d9dd43fb4ea4a4abc781d01cbc257b4d0704a35a13cf147dca268f237d8f4f6e9f8110f2d24bbf12d9201bf221097282f9f3b06e17ca2223437e4b285a4267a31b04a2398b04a5027cc89523b940d678f8d5badc521d891a5b860392542ca97c62910849771e99824af4e105f432ef0f9b350ba1829ffea0d056fa4510ebbe9248a81ca975fbe599801a5ecbde098f8d9b2dde7b48e0aec3d7338e1d1badc3c2c308eeb9afed71164385daa3620c59e665684b1e63a60db30526bedc7a5d90ff1a355cdb346c7aeadef534825c33a82c244b2c4b5804190d5c3a69663c1a1b2dce7dca42cabcbb95748869008d43f535853e79724f7cde62ad3b6e2a1ab39f26ac885ad7681f39496e65cbd82b12768393825d80a1a28f03e33217ab0ee34ca719f9f6394bdeaaefc7a1594c28ae4fd073e90b46ead18d902b07a60b68c3a71382cf7b45f1c2038f361c440b8e3c91ca1ca6ba90706ce9ce0615b90d1f4ecbeaecc162f1cb34479886c3cb7d95d3ecafb5943278a248279b8ee63b796c3ea38ecb7785eebbb16bd8d1849fe89c6fdd954e7987819b6f2c9f3d0d684ea7bbc44d159e7b32545e42fec55767019f95ebd52ac4d8a06d9af2cfe14fdb83140c357a8bfb164c852dd78a535a23dd619e43e4ae1f30bbce6ed9f8300d21cbac8b6be4a54471d494baffe9678870242c37c8331832aacbc33cf4edd1cedba64e2417f0c28be6fe15b550dc7b9581634e787dec6ffb0d62606ccfab181d5cb97258390a32daf1eb5447dfbd86c410688228e84c6a0f0949f455c7391fc658161dbe1b53d0049f1125138a06a908d9ce130718d19aa60e6becce38e2df4d9f7c5c797d6ba7509209352518b15fe62275329a9bc2ff801b86c0efa201cf05f7390ce5427c20c68714c4615b00cb9ae85c72deb19d728bd5ada8dde4bf572cacfa2b0412f899f0a302964071a967d231219f7e34cd12d07add4fdd78ae74d8e9cb3e49024e76230e4fcef71d4dc4d245cfc6031bc0af97aca8dc83deb7e15d9f34b920208c8cbac8a6a7b3f85a129ed8ffc53c08f70283bfcab5438ed72ce5a59bc1fffa8b3bf6ec5aa934534863ac724db2a81a7d691d9a4a94237855f32a620bc0df779811bcc631ceeb47ae904cafb8fd2a846d555f2649ef7d553bf7f02a5c82ad46a6ca2451d406bfeb3bb178c6e56a12e390924976de8e038627420722e471b22dc559e57d767b26079758ab15ca9ed2fd00fdf4e143abc438fbe3678131587f31a5bcf5c967556bcf69a328522fe74cb5b6553c1d71e64201760861a6411029f2446cfdc1c76fac5d1acb9b283b26bcde2f9f5491236f700e77cf10df40605b59118e85c246019775ff6230568f9f2ae8c7e2b89ba087e6929c23f04bb20e6981d7383576585a485cb03c81363ba496c57f06044c5415d45335678add70ab99792e957dc604290832442e83f74531add5154004a749e5ac0434884f3f8659e81296788f5a2f787bbddbb026f7d39a14b415b74268949098e377bbb2084c34590f39a1d733baf4ef66ccb4682456844ad06ed974f01510fb9dcd0a9d2f15097213b61c79379c93eedff1ccd36a616cff9e9db05747edd33ac11fa4b5549812c7dd2febefd0459b8b81cfc003d0135a30cb9ba4c63fbdbd1c94ef300b4e7fddf2a085baf44d32857058aa7ed22fb94838fb8cea7b59be85989f3c686b1784a494287580316dc65878215e6df18601dafc2e58a1aa1c9325b3a9450569795364d1a7199e69cd6011d2f75e371c4cce90b00704530dd32f264ef7a3ece97b613fb79f6f6fa916d294878dbb0798ac6ceed0569bff105b15e1a1a6b72d185f358e43fc4b484e44664102e9c916de0f059965a8c23e152836a357239f294f6bb103ca9140d07ff9105898f2f61684a1dd884d5011bd5191f90e83b683b26a03e6467ed61c65c5cfa959643401797cead1bd13ff8cd3b6c3dbb01c44d32c3edf3b40d487b04a869916c92ae9615c446e51c2a735228f0229bfc2e0b779bfea5052c0a0e785c0069a467da8585667f6e0a892c18332df31d2db460ba79aa1a1b6a17b75fe557267f1c4d49d2fe7d78e25a65791a5166a7185099a817414c5ef22de810ca1db4e6b0161fee52d5c6d679950a01a980c45abebb3b21358ffcfdd5d6ce8830463f224d532cb8359b34f1514a21e0de73eb400dc765292ff4ccbd6d91cc847f1e521c1566cad579118e77397fe50770bdf03e3fedc5cd39f1db952900d6f2b3cd107b46d727ef00760205f7b0057c939a7551cc40ee4abce5a70e3f55d67016be59f7365caf130c7e517b9af35941b9426110d0fb5455da8cc40b90334c9dfba680c3dd64c476de7f4fa2402794004fa4ef2b31b29bfaca295236490a2bad1d0d6f9b2cd2eaf29bd7be1d440e4ad910fc0fac02bbb421b7552f3870bfa2ab6879fbc06de76ba160d646e1c0323911a03bebcca45c50fa5acd49d3c26487e34c181063ab710851c51442896027d1f4ca856a18e28ce8e93c45d67abd76743409052f082de61340abdd7c1ff96a5a5e41feeef4bd36acb5abfb22e5699c9464673677011c724fe83f16d3e51e8b418e6a0938f3e547c1046aca68260c70cdff7809a48c14400af4421c62a061120cd662f9feedad393c176a3e449abb0bac7f738a9406bef58866256c5f32d50d43dcd9d5b05ea89476ca7e7e50d76ef3d799066dc74657340b83f26bf9a5fbe9caa6291f88d246489936b0d013455d51633e145cabefbc363c2a2a2b919d53218e00ae38e389babcba265bd6fd5e5ca875373bd6586ba69751f761ceecfde68c91e1a335b568fe28e82fef929934d47540828ca5e3545d10effe91709190b8de8efa36740932ffa7a013c86012e88f8c32df6c2785d4bd4a676d6fa2c5458447a38c6836f84d36e247cdba56f798891021b94398246d110b7f7fb429740440cf15afb5cddd8f52b51b67298b74c613069c0bac1ef0e909043613da30a0e1bc177176803c6362484f6240833e1a3876309b3c1da21b4b41d9f271b29e2f96e5ddeb8af25ecaa2ce231fb85bf22acdc4a191c2fa2cf2c5c5736af0dc0df68a5654fa4856f6ac06331d024475cd0023a6d1db7e74399acfaa6e3899adb2d60bf662cef6d889ae772fab81f810d139d0f22a91a5bf083019e66ad0c7a4ad529852b6ea2f799de72966fbed2b8426d97c3032298d8823f893ccc29fc7ae3e34da5c68758f267cd11507f80bb927e3a7db9ae38cac08a6103505e99a3beb867e57f6da6642dc7bd3878f716b1fc39edb350426f20b0663f76535a183a7a40137b8cac222c2f52e64c9ca6106da4cfefc3669c7b362c8c63089005a06e07b6c15d5eee5fa66901637d376f2ee7358b0aa5e57304c7b7baf4591485b900d1d005e13a2d08edc3b0c96d981ee8f9e6dd5849932794153c16960e7141e0b5ece2ed848580630fbcc331fd70d8678d4ba443403fa24547251fb83c1473e124461d86d6235b2a83e7772274709e685a2d8f14d9217a3e141816c906d6db812a7646f040fdd36076b7b6f67d8ae5d344e46f584c08b2a50f19d40e33e5e727ee0967ecbd566fbd953ac10f53edb65f94f97c284922cbfa78aecd16c8d4c432235e4b880fbfc29e43be4eb2fcbf1c00ff512e8e5db006c12a11934e77a1fe069cdeeaf9bc2c296089540bbccf68e1ed1723a3e350c2d0a45ae68d983c1d9b95f974ade8eb414f7c2e9d6d1f83031a16ecf418e54a56120c5668e16eaf41edd605d161df62fa5fbbdb4b274fd7b7390294a641598e724c48ad2756079a7e4006d43c8e2d9c4694829f7209ff9b39c308535e943f5eb4ef412dc1abd1c29dc449a52055a25f01a6c9ad4aeb55dcc10a97f96837c10e493d1efc6e193be6821fc58374108883270022dd4a04b0f5e908c706d998e3cc8b16ff902976d352c4c194d105c3c7fdb158572a7e84947175b60b7f4ad97a171a642794e8d46e0a0ac13fea6026ece7bf4fab67f149b499b39ce3b33071e8973258ecfa44315051635c187b4a365813792ea9b8b3e005d4e750d0cedf3c82cccf5eb2390b9384e98b82de57fb16e199175a39a6b2b39ef8abae573877af2b92998a0a3ca8fe707fe19cbdd5a55c0e54b7fc763a1e2629d7a6689fd23fbf253fb569706c318a9da321df737ce4b9bcd63aa46868000da294409", 0xfe0, 0x483e}, {&(0x7f0000000200)="84f446a627a0b79c96e18fb3b522ae2bd2776c4056b0", 0x16, 0x8}], 0x41400, &(0x7f0000000300)=ANY=[@ANYBLOB='check=strict,dots,dots,dmask=000000000000000001736\"1,measur,rootcontext=uncned_u,hash,uid=', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=vfat\x00,pcr=00000000000000000025,\x00']) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x902, 0x100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r10, @ANYRES32=r6, @ANYRES32=r9, @ANYRESHEX=r8, @ANYRES64, @ANYRESOCT, @ANYRES64=r7, @ANYRES32, @ANYRESOCT]) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x2, 0x8e, 0x3f, 0x0, 0x5, 0x2000, 0x1a, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7, 0x6}, 0x12005, 0x1, 0x80, 0x4, 0xf4, 0x7ff, 0x8, 0x0, 0x4, 0x0, 0x7fffffff}, r7, 0x2, r4, 0x2) statx(r3, &(0x7f0000000040)='./file0/file0\x00', 0x2000, 0x200, &(0x7f00000003c0)) 15:20:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) 15:20:29 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="85065c36fe0001e47e45c8fb916772653600000000", @ANYRES32=0x0, @ANYBLOB="002000000000000900000008441b0050006400000504040000000000000000004414ec5164010102800000017f000001000003f1830b2cac14142fe0000001071b7264010100ffffffff00000000f45f0002e000000200000000dfc1"]}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000280), 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') r6 = accept$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000004c0)={0x2, 0x0, &(0x7f0000000480)=[r6]}, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000180)={0x3, 'macvtap0\x00', {0xfffffffa}, 0x401}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', r4, 0x4, 0x1f, 0x3a, 0xfffffff8, 0x1c, @mcast1, @loopback, 0x8008, 0x80, 0xffffffff}}) r7 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0xb) openat$incfs(r7, &(0x7f0000000240)='.pending_reads\x00', 0x524200, 0x7a6ce9033761a7a6) socket$nl_route(0x10, 0x3, 0x0) r8 = accept$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x2d, 0x8, 0xe50, {0x5, @esp_ip6_spec={@mcast2, @private1, 0x0, 0x4}, {0x0, @empty, 0x7, 0x8, [0x9, 0x8]}, @sctp_ip6_spec={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x4e23, 0x4e22, 0x9}, {0x0, @broadcast, 0x400, 0xda6d, [0x5]}, 0x8, 0x9}, 0x3, [0x20, 0x2, 0x4]}}) 15:20:29 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 829.745310] audit: type=1326 audit(1661959229.923:55): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6045 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18bc35db19 code=0x0 15:20:29 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x4d}, 0x1}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) recvfrom(r1, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="3a0d00000000000007200000000006c98754050000000000000004000000000000000200000000000000c910200100000000000000000000000000000738000000010c04620f010000000000000000000000000005000000008c0000090000000000000001000000000000000000a7ed12ab017620ae6caf5a1007d6ee1e41194d8f00"/140], 0x78) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)=ANY=[@ANYBLOB="080000000200000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bind$packet(r2, &(0x7f0000002100)={0x11, 0x16, r3, 0x1, 0x9}, 0x14) 15:20:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 23) 15:20:29 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x50, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose}, {@version_u}, {@cachetag}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@mmap}], [{@dont_hash}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, '[]#>(+-'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '{'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@euid_lt={'euid<', 0xee00}}, {@hash}, {@obj_type}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) 15:20:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 6) [ 829.766372] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 829.780187] FAULT_INJECTION: forcing a failure. [ 829.780187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.781102] CPU: 1 PID: 6055 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 829.781697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 829.782525] Call Trace: [ 829.782732] [ 829.782914] dump_stack_lvl+0x8b/0xb3 [ 829.783216] should_fail.cold+0x5/0xa [ 829.783518] _copy_from_user+0x2a/0x170 [ 829.783841] memdup_user+0x6e/0xd0 [ 829.784132] strndup_user+0x74/0xe0 [ 829.784417] __x64_sys_mount+0x17c/0x300 [ 829.784744] ? path_mount+0x1e20/0x1e20 [ 829.785064] ? syscall_enter_from_user_mode+0x1d/0x50 [ 829.785467] ? syscall_enter_from_user_mode+0x1d/0x50 [ 829.785868] do_syscall_64+0x3b/0x90 [ 829.786167] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 829.786552] RIP: 0033:0x7f4827e8ab19 [ 829.786838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 829.788183] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 829.788763] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 829.789318] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 829.789846] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 829.790395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.790944] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 829.791497] [ 829.819909] loop7: detected capacity change from 0 to 264192 15:20:30 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r6, @ANYRESHEX=r5, @ANYRES64, @ANYRESOCT, @ANYRES64=r4, @ANYRES32, @ANYRESOCT]) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7ff}}, {@version_L}, {@cachetag}, {@fscache}, {@access_user}, {@access_client}], [{@appraise_type}, {@euid_lt={'euid<', r5}}, {@smackfsfloor}, {@pcr={'pcr', 0x3d, 0x3f}}, {@dont_appraise}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, '.!'}}, {@euid_gt={'euid>', r8}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) 15:20:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 7) 15:20:30 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0xffffffff, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:20:30 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 24) [ 829.928129] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:20:30 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000000000)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0xfffffffd}, 0x10, 0x0}}], 0x1, 0x404c0d1) close_range(r0, 0xffffffffffffffff, 0x0) r3 = signalfd(r0, &(0x7f0000000100), 0x8) io_uring_enter(r3, 0x25be, 0x7d4e, 0x3, &(0x7f0000000140)={[0x2]}, 0x8) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000080)) 15:20:30 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pipe2$9p(&(0x7f0000000040), 0x82000) accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) write$P9_RWALK(r1, &(0x7f0000000000)={0x30, 0x6f, 0x2, {0x3, [{0x2, 0x3, 0x7}, {0x0, 0x4}, {0x20, 0x3, 0x5}]}}, 0x30) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) 15:20:30 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0xf, 0x12, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:20:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 8) 15:20:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) 15:20:42 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x4d}, 0x1}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) recvfrom(r1, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="3a0d00000000000007200000000006c98754050000000000000004000000000000000200000000000000c910200100000000000000000000000000000738000000010c04620f010000000000000000000000000005000000008c0000090000000000000001000000000000000000a7ed12ab017620ae6caf5a1007d6ee1e41194d8f00"/140], 0x78) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)=ANY=[@ANYBLOB="080000000200000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 15:20:42 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) clone3(&(0x7f0000000280)={0x240480, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000100)=""/104, 0x68, &(0x7f0000000180)=""/186, &(0x7f0000000240)=[0x0, 0x0], 0x2}, 0x58) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) io_cancel(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f0000000300)="e8a5dcf691c6247dd40dfaae8b5ea2d4472bda1d1d04ed7a7da4d72841448b1b530c03f7f68ff1a8f6373ffce6ab7547c8892896573cd554acc2688df3a12b950534554d0c0c", 0x46, 0xfff, 0x0, 0x1, r2}, &(0x7f00000003c0)) 15:20:42 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0xc0, 0x12, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:20:42 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') r5 = accept$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000004c0)={0x2, 0x0, &(0x7f0000000480)=[r5]}, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000000)={0x8, 'netpci0\x00', {'nr0\x00'}, 0x1f}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="dcb33c0ed5c94898d987fd3452376ca863d0cca3577069a323afcf28f4969ca67c05aa4dc81cefebf60e3fad6547fdd886c2ae203bb61c0b176892820d49ae804a7ded9cfc859cae4c02dfc82aef45b8cd2af884e7941beaeed1d2f9a4e0f7bc43b38f09c23027688c5bb27a6028510b352fa2ff42ba770b718b1164f9d79b0e", 0x80}, {&(0x7f0000000180)="72ca05b4c90b327b15ed23e4bc2d8d109053705566807e005fd1b54b626cce7b09df0b59affd642dd9e681c53e38419243c1b0ca1d235664386c541dbd3e8db11a37a206c1c683f82391c4a186522b7dcdaf57d22092e5f88f23844f1317f9cb251de1c496dffdf82f5533963c31f80b689b2c3bba5eeddad2aefb091dedecc922d9cbdc668a4bfabc8588cdaad30d0bdaa0a231d1f945dcd3a0f1545590209131887f7cf3a61df1da4998beece55d92bd487498dddb4ed8dfe9e7f4f25baa0a4158db7fcea633a59dd98dbecef7c9e6a044d9b3a3f15760", 0xd8}, {&(0x7f0000000280)="4d2c1f469bec17d674110be8bebcac280a33c83d70c31ed0d3d92db627a7cda37c9c0bde513b49dc3a5b0c25a7fbf6fee848c81aad3bc97141514dc38910c9e0bcf8f173622f00d19f144d44215ce7e6dd35646aba81790ef979b427a49300e32d2025e1bd7e7cedff8973d4c419d8e484d94f5930d3bcc565a8a914447374655c3873e5866744be12a2c1660765e8408b9eaf12af65ad17bd269e0c39f4001d7f2fcf01b6a7dc2bcb22baeca436d33a2924e6dc10784daedb517164a679177b4c3233d9fceee467089a1e8d5487e5d043c34a5d", 0xd4}, {&(0x7f0000000500)="336e7456775fbd7502559c21d8591f12dcf61c96cb9d3e352654e15c444c48d8e6c92efdef04d3bd8e0d9a8234d8bb698c718c2aee8cb203037db0fcebe9f35c817a98c1db11b35248ce8738738b39df0ebbcae76d648ceeca7b035eb9fe8df265e852c39ea7b444a47f32c6b5b6a9c065208d542c8cb3ff0f998a23e9f84ac31cbb8de6203dc63cdea321e9f4737db1a17786d567a204", 0x97}, {&(0x7f00000005c0)="6250c7e1ff38f4f871148538bef174f2b36927cbfad9718e71db252a3296582189c68375d9d799259220c2c5d91a34a2f86c2a1b8f7106c7ba8bcbe61f76c65cb77061457758a748ef781e24118bf1f867b197f6471b5470a1d46a88383eb8029e5eb0a7ac45b7889b80171d780c34e35bbc158307265bca4d724fa6b5f10b3e87942c40f44c4e96540a709e4c3a3f4441cd26672614b44d5479f7ac895b8b38e0a78d0e795e9a5e6ad207c22ca358580dd18d1d7172d97420b6b2b55b4b1035b3e4ca30d4ae78eb9718c04c4d74e3bdd7ae69fb566971348f85683b8041037377fcac55fa82740812e5b4f823874c", 0xef}, {&(0x7f00000006c0)="bed60f20372dc776a4dceaee46116b5e5ab7924d857ba53cfc0e6fa738edfa41a2032adc734f0497bc812fbdd9bdbacd1663946c1ac2db346435f313535113fc29b275ab77ae73d7421eacbff86a076227ac959d6a807ce2305fe602a3e781982ddfc2655831bcc33d38fdf50fca47c0e26bb30c80fc19b519ddfc9d9af17583e418eb6b585a4a01877d06b897d2926d6c7a311fe382685aab44a7d2713b0e894bd41c1f17705141afa7718664642a1ede9eb5d5ef06bfb91f71c405a7bd6bbaa47bf3e166357cf8278fa7fce61ba26a", 0xd0}, {&(0x7f00000007c0)="a5e14ecb9715702b5ea0ad568b3dea43b0a4948162b5ff8274c8c41a1cfab1d33d329f327f8a3bf90e4e9df5abd567bf86f30133007166fc2604fd38a4bab133919ad0eea388582f33bdcd49dfea9497a008506212a188fd3a233c4cb4402ff58fc4c512a33e70c6d33c0c837083bf23fa8da81708c1173402acdd74fcf57376916705949315095b8b631953fbd6a45d3714f155e484351b37f2063749792d18b65dca4642fbfb2971e8c2336f8cdd44249bf1d73e", 0xb5}], 0x7, &(0x7f0000000880)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xfd, 0x3, 0x3, [{@multicast1, 0x5}, {@multicast1, 0x6e28}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @rr={0x7, 0x17, 0x62, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @broadcast, @local, @private=0xa010102]}, @cipso={0x86, 0x20, 0x2, [{0x7, 0x5, "83cb32"}, {0x7, 0x9, "0139c2b80a9240"}, {0x2, 0xc, "2a2b139785472f4482ba"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x44, 0xcb, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x7}, {@private=0xa010100, 0x9}, {@local, 0x5}, {@remote, 0x4}, {@loopback, 0x6}, {@local, 0x81}, {@multicast2, 0x5}, {@broadcast, 0x6}]}, @lsrr={0x83, 0x17, 0x8d, [@local, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x31}, @loopback]}, @cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x2, 0x12, "a29049d220495fe777263c73d35fc7a7"}, {0x7, 0x6, "3404c2bd"}]}, @timestamp_prespec={0x44, 0x34, 0xe3, 0x3, 0x0, [{@remote, 0x5}, {@private=0xa010102, 0x80}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x20}, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x1}, {@broadcast, 0x6}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @multicast2}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0xe0, [@private=0xa010100, @multicast2, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @multicast1]}, @generic={0x82, 0xa, "ad2f2d8e6157fac9"}, @timestamp={0x44, 0x20, 0x9f, 0x0, 0x0, [0x400, 0x3f, 0x2, 0x0, 0x4000000, 0x4, 0x401]}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xb2, [@empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x54, 0xd, "daf02f009072a188084334"}, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x0, 0x9, "09f61ad707fe80"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x95, 0x0, 0x9, [0x1, 0x7ff, 0x1]}, @timestamp_addr={0x44, 0x34, 0xdf, 0x1, 0x5, [{@empty, 0x9}, {@local, 0x8}, {@remote, 0x7}, {@empty, 0x4}, {@broadcast, 0x5a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3f}]}, @ssrr={0x89, 0xb, 0x3, [@broadcast, @remote]}, @timestamp_prespec={0x44, 0x1c, 0x30, 0x3, 0x0, [{@private=0xa010101, 0x2}, {@dev={0xac, 0x14, 0x14, 0xf}, 0xffff0001}, {@multicast1, 0x10000}]}]}}}], 0x2b8}, 0xd5) 15:20:42 executing program 7: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0/file0\x00'}) write$P9_RFSYNC(r2, &(0x7f0000000540)={0x7, 0x33, 0x2}, 0x7) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r3 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x100000001, 0x2, &(0x7f0000000240)=[{&(0x7f0000000680)="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", 0xfe0, 0x483e}, {&(0x7f0000000200)="84f446a627a0b79c96e18fb3b522ae2bd2776c4056b0", 0x16, 0x8}], 0x41400, &(0x7f0000000300)=ANY=[@ANYBLOB='check=strict,dots,dots,dmask=000000000000000001736\"1,measur,rootcontext=uncned_u,hash,uid=', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=vfat\x00,pcr=00000000000000000025,\x00']) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x902, 0x100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r10, @ANYRES32=r6, @ANYRES32=r9, @ANYRESHEX=r8, @ANYRES64, @ANYRESOCT, @ANYRES64=r7, @ANYRES32, @ANYRESOCT]) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x2, 0x8e, 0x3f, 0x0, 0x5, 0x2000, 0x1a, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7, 0x6}, 0x12005, 0x1, 0x80, 0x4, 0xf4, 0x7ff, 0x8, 0x0, 0x4, 0x0, 0x7fffffff}, r7, 0x2, r4, 0x2) statx(r3, &(0x7f0000000040)='./file0/file0\x00', 0x2000, 0x200, &(0x7f00000003c0)) 15:20:42 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 25) 15:20:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 9) [ 842.205740] audit: type=1326 audit(1661959242.383:56): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6096 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18bc35db19 code=0x0 [ 842.221630] FAULT_INJECTION: forcing a failure. [ 842.221630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.223304] CPU: 1 PID: 6108 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 842.224406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 842.225911] Call Trace: [ 842.226273] [ 842.226626] dump_stack_lvl+0x8b/0xb3 [ 842.227177] should_fail.cold+0x5/0xa [ 842.227720] _copy_from_user+0x2a/0x170 [ 842.228281] copy_mount_options+0x76/0x180 [ 842.228890] __x64_sys_mount+0x1a8/0x300 [ 842.229504] ? path_mount+0x1e20/0x1e20 [ 842.230124] ? syscall_enter_from_user_mode+0x1d/0x50 [ 842.230913] ? syscall_enter_from_user_mode+0x1d/0x50 [ 842.231695] do_syscall_64+0x3b/0x90 [ 842.232261] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 842.233017] RIP: 0033:0x7f4827e8ab19 [ 842.233570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 842.236193] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 842.237303] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 842.238377] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 842.239460] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 842.240551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.241604] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 842.242711] [ 842.252372] loop7: detected capacity change from 0 to 264192 15:20:42 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) syncfs(r0) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 15:20:42 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 26) 15:20:42 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000080)={0xfffffffffffffffa, 0x55b, 0x3, 0x1, 0x2, [0x9, 0x3ff, 0x5, 0x101]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x401}, 0x1c) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) socket$packet(0x11, 0x3, 0x300) 15:20:42 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0xec0, 0x12, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:20:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 10) 15:20:42 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept4$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c, 0x800) r3 = accept$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'virt_wifi0\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:20:42 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x80045440, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x80045440, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x80045440, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2420c1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r6, 0x80045440, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r7, 0x80045440, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r8, 0x80045440, 0x0) r9 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0xc6d549b0840631b8) poll(&(0x7f0000000140)=[{r1, 0x2462}, {r3, 0x208}, {r4, 0x9400}, {r5, 0x1}, {r6, 0x20}, {r7, 0x101}, {r8}, {0xffffffffffffffff, 0x8004}, {r0, 0x80}, {r9, 0x1000}], 0xa, 0x9) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x3f7, 0x2, 0x70bd26, 0x25dfdbfd, {0xd, 0x7, './file0/file0', './file0'}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40811) fadvise64(r2, 0x40, 0xffffffffffffff5f, 0x0) ioctl$int_out(r1, 0x5462, &(0x7f0000000000)) 15:20:42 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x33fe0, 0x12, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:20:56 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 11) 15:20:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) 15:20:56 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x4d}, 0x1}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) recvfrom(r1, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="3a0d00000000000007200000000006c98754050000000000000004000000000000000200000000000000c910200100000000000000000000000000000738000000010c04620f010000000000000000000000000005000000008c0000090000000000000001000000000000000000a7ed12ab017620ae6caf5a1007d6ee1e41194d8f00"/140], 0x78) 15:20:56 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x80045440, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000007200)=ANY=[@ANYBLOB="080000000000000006000000000000000500000000000000", @ANYRES32=r2, @ANYBLOB="000000000600"/28, @ANYRES32=r4, @ANYBLOB="040000000004000000000000000000000066140068b420ab4a0000009eb15a1adde786d5ed6abe5f17c6e9bfaefa8cda9cfc8079111a0e8476a90a65d4e2867e1b3b9ec23f911cda362a076f8d3b48d9c0d1b325d40d6665a7cc85f26908550c5e58c2edf17558b72141dc46ab1e1be318d01df285cfa5e89f3e65ecc4681b13474892db5f78c625f20a75efc538a451434fb02fe165ea48a904b408b14d523137950a298fe3942c5a830ebde07de52b814d089763cf68b63a26305c100152590d9fa869c6726bb9765b0836f1e5ba54e59ff3251c853b9bd60e269cab29ecc1a918e21aa9fa996fbae208", @ANYRES32=r2, @ANYBLOB="00000000c3eb00"/28, @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32=r0, @ANYBLOB="000000000200"/28]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) r6 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0xb) recvmmsg(r6, &(0x7f0000006e40)=[{{&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000080)=""/6, 0x6}, {&(0x7f0000000180)=""/35, 0x23}], 0x3, &(0x7f0000000200)=""/176, 0xb0}, 0x4}, {{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000340)=""/172, 0xac}, {&(0x7f0000000400)=""/58, 0x3a}, {&(0x7f0000000440)=""/144, 0x90}, {&(0x7f0000000500)=""/90, 0x5a}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/165, 0xa5}, {&(0x7f0000001640)=""/166, 0xa6}, {&(0x7f0000001700)=""/44, 0x2c}, {&(0x7f0000001740)=""/153, 0x99}], 0x9}, 0x80bc}, {{&(0x7f00000018c0)=@pptp, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001940)=""/90, 0x5a}, {&(0x7f00000019c0)}], 0x2, &(0x7f0000001a40)=""/152, 0x98}, 0x800}, {{&(0x7f0000001b00)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000001b80)=""/205, 0xcd}, {&(0x7f0000001c80)=""/247, 0xf7}, {&(0x7f0000001d80)=""/151, 0x97}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/153, 0x99}, {&(0x7f0000002f00)=""/127, 0x7f}, {&(0x7f0000002f80)=""/41, 0x29}, {&(0x7f0000002fc0)=""/8, 0x8}, {&(0x7f0000003000)=""/189, 0xbd}, {&(0x7f00000030c0)=""/4096, 0x1000}], 0xa, &(0x7f0000004180)=""/169, 0xa9}, 0x4}, {{&(0x7f0000004240), 0x80, &(0x7f0000004580)=[{&(0x7f00000042c0)=""/47, 0x2f}, {&(0x7f0000004300)=""/22, 0x16}, {&(0x7f00000043c0)=""/255, 0xff}, {&(0x7f00000044c0)=""/138, 0x8a}, {&(0x7f0000004340)=""/20, 0x14}], 0x5, &(0x7f0000004600)=""/199, 0xc7}, 0x4}, {{&(0x7f0000004700)=@generic, 0x80, &(0x7f0000005880)=[{&(0x7f0000004780)=""/124, 0x7c}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/126, 0x7e}], 0x3, &(0x7f00000058c0)=""/114, 0x72}, 0x7f}, {{&(0x7f0000005940)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000005ac0)=[{&(0x7f00000059c0)=""/255, 0xff}], 0x1}, 0x8}, {{&(0x7f0000005b00)=@nl=@proc, 0x80, &(0x7f0000006d80)=[{&(0x7f0000005b80)=""/113, 0x71}, {&(0x7f0000005c00)=""/69, 0x45}, {&(0x7f0000005c80)=""/191, 0xbf}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/8, 0x8}], 0x5, &(0x7f0000006e00)=""/34, 0x22}, 0xffff}], 0x8, 0x60, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15:20:56 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 27) 15:20:56 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x7ffff000, 0x12, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:20:56 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x40014, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@access_client}], [{@dont_appraise}, {@dont_hash}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) 15:20:56 executing program 7: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0/file0\x00'}) write$P9_RFSYNC(r2, &(0x7f0000000540)={0x7, 0x33, 0x2}, 0x7) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r3 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x100000001, 0x2, &(0x7f0000000240)=[{&(0x7f0000000680)="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", 0xfe0, 0x483e}, {&(0x7f0000000200)="84f446a627a0b79c96e18fb3b522ae2bd2776c4056b0", 0x16, 0x8}], 0x41400, &(0x7f0000000300)=ANY=[@ANYBLOB='check=strict,dots,dots,dmask=000000000000000001736\"1,measur,rootcontext=uncned_u,hash,uid=', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=vfat\x00,pcr=00000000000000000025,\x00']) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x902, 0x100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r10, @ANYRES32=r6, @ANYRES32=r9, @ANYRESHEX=r8, @ANYRES64, @ANYRESOCT, @ANYRES64=r7, @ANYRES32, @ANYRESOCT]) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x2, 0x8e, 0x3f, 0x0, 0x5, 0x2000, 0x1a, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7, 0x6}, 0x12005, 0x1, 0x80, 0x4, 0xf4, 0x7ff, 0x8, 0x0, 0x4, 0x0, 0x7fffffff}, r7, 0x2, r4, 0x2) statx(r3, &(0x7f0000000040)='./file0/file0\x00', 0x2000, 0x200, &(0x7f00000003c0)) [ 856.759762] audit: type=1326 audit(1661959256.937:57): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6145 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18bc35db19 code=0x0 [ 856.766334] loop7: detected capacity change from 0 to 264192 15:20:56 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0xfffffdef, 0x12, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:20:57 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 12) 15:20:57 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 28) 15:20:57 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)) 15:20:57 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x7f) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') r4 = accept$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000004c0)={0x2, 0x0, &(0x7f0000000480)=[r4]}, 0x1) sendmmsg$inet(r4, &(0x7f0000000080), 0x7, 0x4008080) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000000)) 15:20:57 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0xf, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:20:57 executing program 7: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0/file0\x00'}) write$P9_RFSYNC(r2, &(0x7f0000000540)={0x7, 0x33, 0x2}, 0x7) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r3 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x100000001, 0x2, &(0x7f0000000240)=[{&(0x7f0000000680)="8100ff7937b28c79eb7e6bc4f64888eb46d6fff57519be3fa018a7e08512e9490b2cb48a31d0fd665d810c39c1ecd29300d1d8ac3e1dddd4c21dd7ab59ae05f3494e1192d169840a41ae6e090a8947c21226295a8110d1a8cb4042be4c41459c159761f3168be6735b7c2fbf9fdf7dbeba560257ee6cb634e37b45cd6ed1f3fcbb6fb461cfb28193b8b3d7695196f50a4d0edb0cfb561242ac078abed877502f43e056236cb23f18d981cde7e5b59abf566f15650345385ae471b9a49e88b45167a0f4e36ce568ac65e67d01fb82c94c74c238101e352450e612195e1c10b42155287f84e363545da5cd176551a1a29d89a851405dd807f578eff67f14f26ef470d11c01129ac1c657580626cabf621667a4c6cfe5a2d424a056e94573b24ad3dee9ae74d7ea3a7447aa0e64e4c485829807c0e8df339eaa094c06f91a45b1390dceebd7e78394e26e0f23a278b79f4661441336f1f00226333d468a0ef9de70da5134b667b189b7f1fa92136c9d23e8a027f2b558a758af31d39d4309de4e3e6baaf0a22c6df21b0de69143be05cd7dcfe8e0ac1fc7d0dcf0383afd8252eb5a0f71733d4db91df51b77081e9953c6e16e4b71d86ffe944238963cb2c27dde897282c7235283db274b4ef9a14804c637e8b6c7bc830b93727c5a3822837a28ce60369692148cca5f314ba62a0956e8a6ada7f98b66dc9e278ec73cbcd8fc78bf03f91867835ab901722bb48254beedf8ad7b130eb5641d02e1f46ea710c488953f481c6e7180477a41a7411541054292df608abafc3194c1ee1966b50fa9b2e1822d904b9a004e9460212209916f2248fa047a76ce59725b626099e7a7e656214660bd4ae87e6aeda59f013cd297e42447da47a9cf26f12ad098da172656e72e1555b12385550eb6313e0d5e30dc724e0f43572ebf0a41b538e591ebf2c4f816cbe07bb216a3d1128a5e424586c914fe8138cbf54e1e61e8365d365460dff0dc78d03e87645671f0be6855dc92403b98e075dab68f08b7bfa2901c68723b0182a79d18966e049e4c2554c48ab8788575dd3b4292e926cf7767bb097ea159852b8704ca653ea5f477a85caf227172bccf2e185e1badbcb49d732bcf520b08105498a25f7ff31e1182e85ff66a2ada10fd5878583aa495d02d8c5b055d25f62798bb5ee46e1d518f398e067fb857b1463c89d46eed23a1f6c78356a037fc0063931916068c10901fcab3688664a609fcbec50d30a2edbda20a448ee575ef1d6bc30df64e1e930a9a38d5defdbedcacd88035d63e905624001802383828a3e1167f1cfb1a3eb154ecafc55b8709a2910a595bdf166ca318ca054fd1e9513f653aef50b5ef33a7d7d553e2c871a2f283c891036a85962fbd06a3c45bac5fbae17ea742d01707238224c5a534d3da6d3fb9d06a874a375e3fe08f85605246dca4d394e750798f4b061ceaef6fdaa3d2683af476f9dd3a63d3e82d0de50e71a04ffc2f51f53cb09f89e300eb6ccd1856d140f90b605ee28b87908ddd21817ae552a87133ee0a6dc76ef5017833850eb30d9dd43fb4ea4a4abc781d01cbc257b4d0704a35a13cf147dca268f237d8f4f6e9f8110f2d24bbf12d9201bf221097282f9f3b06e17ca2223437e4b285a4267a31b04a2398b04a5027cc89523b940d678f8d5badc521d891a5b860392542ca97c62910849771e99824af4e105f432ef0f9b350ba1829ffea0d056fa4510ebbe9248a81ca975fbe599801a5ecbde098f8d9b2dde7b48e0aec3d7338e1d1badc3c2c308eeb9afed71164385daa3620c59e665684b1e63a60db30526bedc7a5d90ff1a355cdb346c7aeadef534825c33a82c244b2c4b5804190d5c3a69663c1a1b2dce7dca42cabcbb95748869008d43f535853e79724f7cde62ad3b6e2a1ab39f26ac885ad7681f39496e65cbd82b12768393825d80a1a28f03e33217ab0ee34ca719f9f6394bdeaaefc7a1594c28ae4fd073e90b46ead18d902b07a60b68c3a71382cf7b45f1c2038f361c440b8e3c91ca1ca6ba90706ce9ce0615b90d1f4ecbeaecc162f1cb34479886c3cb7d95d3ecafb5943278a248279b8ee63b796c3ea38ecb7785eebbb16bd8d1849fe89c6fdd954e7987819b6f2c9f3d0d684ea7bbc44d159e7b32545e42fec55767019f95ebd52ac4d8a06d9af2cfe14fdb83140c357a8bfb164c852dd78a535a23dd619e43e4ae1f30bbce6ed9f8300d21cbac8b6be4a54471d494baffe9678870242c37c8331832aacbc33cf4edd1cedba64e2417f0c28be6fe15b550dc7b9581634e787dec6ffb0d62606ccfab181d5cb97258390a32daf1eb5447dfbd86c410688228e84c6a0f0949f455c7391fc658161dbe1b53d0049f1125138a06a908d9ce130718d19aa60e6becce38e2df4d9f7c5c797d6ba7509209352518b15fe62275329a9bc2ff801b86c0efa201cf05f7390ce5427c20c68714c4615b00cb9ae85c72deb19d728bd5ada8dde4bf572cacfa2b0412f899f0a302964071a967d231219f7e34cd12d07add4fdd78ae74d8e9cb3e49024e76230e4fcef71d4dc4d245cfc6031bc0af97aca8dc83deb7e15d9f34b920208c8cbac8a6a7b3f85a129ed8ffc53c08f70283bfcab5438ed72ce5a59bc1fffa8b3bf6ec5aa934534863ac724db2a81a7d691d9a4a94237855f32a620bc0df779811bcc631ceeb47ae904cafb8fd2a846d555f2649ef7d553bf7f02a5c82ad46a6ca2451d406bfeb3bb178c6e56a12e390924976de8e038627420722e471b22dc559e57d767b26079758ab15ca9ed2fd00fdf4e143abc438fbe3678131587f31a5bcf5c967556bcf69a328522fe74cb5b6553c1d71e64201760861a6411029f2446cfdc1c76fac5d1acb9b283b26bcde2f9f5491236f700e77cf10df40605b59118e85c246019775ff6230568f9f2ae8c7e2b89ba087e6929c23f04bb20e6981d7383576585a485cb03c81363ba496c57f06044c5415d45335678add70ab99792e957dc604290832442e83f74531add5154004a749e5ac0434884f3f8659e81296788f5a2f787bbddbb026f7d39a14b415b74268949098e377bbb2084c34590f39a1d733baf4ef66ccb4682456844ad06ed974f01510fb9dcd0a9d2f15097213b61c79379c93eedff1ccd36a616cff9e9db05747edd33ac11fa4b5549812c7dd2febefd0459b8b81cfc003d0135a30cb9ba4c63fbdbd1c94ef300b4e7fddf2a085baf44d32857058aa7ed22fb94838fb8cea7b59be85989f3c686b1784a494287580316dc65878215e6df18601dafc2e58a1aa1c9325b3a9450569795364d1a7199e69cd6011d2f75e371c4cce90b00704530dd32f264ef7a3ece97b613fb79f6f6fa916d294878dbb0798ac6ceed0569bff105b15e1a1a6b72d185f358e43fc4b484e44664102e9c916de0f059965a8c23e152836a357239f294f6bb103ca9140d07ff9105898f2f61684a1dd884d5011bd5191f90e83b683b26a03e6467ed61c65c5cfa959643401797cead1bd13ff8cd3b6c3dbb01c44d32c3edf3b40d487b04a869916c92ae9615c446e51c2a735228f0229bfc2e0b779bfea5052c0a0e785c0069a467da8585667f6e0a892c18332df31d2db460ba79aa1a1b6a17b75fe557267f1c4d49d2fe7d78e25a65791a5166a7185099a817414c5ef22de810ca1db4e6b0161fee52d5c6d679950a01a980c45abebb3b21358ffcfdd5d6ce8830463f224d532cb8359b34f1514a21e0de73eb400dc765292ff4ccbd6d91cc847f1e521c1566cad579118e77397fe50770bdf03e3fedc5cd39f1db952900d6f2b3cd107b46d727ef00760205f7b0057c939a7551cc40ee4abce5a70e3f55d67016be59f7365caf130c7e517b9af35941b9426110d0fb5455da8cc40b90334c9dfba680c3dd64c476de7f4fa2402794004fa4ef2b31b29bfaca295236490a2bad1d0d6f9b2cd2eaf29bd7be1d440e4ad910fc0fac02bbb421b7552f3870bfa2ab6879fbc06de76ba160d646e1c0323911a03bebcca45c50fa5acd49d3c26487e34c181063ab710851c51442896027d1f4ca856a18e28ce8e93c45d67abd76743409052f082de61340abdd7c1ff96a5a5e41feeef4bd36acb5abfb22e5699c9464673677011c724fe83f16d3e51e8b418e6a0938f3e547c1046aca68260c70cdff7809a48c14400af4421c62a061120cd662f9feedad393c176a3e449abb0bac7f738a9406bef58866256c5f32d50d43dcd9d5b05ea89476ca7e7e50d76ef3d799066dc74657340b83f26bf9a5fbe9caa6291f88d246489936b0d013455d51633e145cabefbc363c2a2a2b919d53218e00ae38e389babcba265bd6fd5e5ca875373bd6586ba69751f761ceecfde68c91e1a335b568fe28e82fef929934d47540828ca5e3545d10effe91709190b8de8efa36740932ffa7a013c86012e88f8c32df6c2785d4bd4a676d6fa2c5458447a38c6836f84d36e247cdba56f798891021b94398246d110b7f7fb429740440cf15afb5cddd8f52b51b67298b74c613069c0bac1ef0e909043613da30a0e1bc177176803c6362484f6240833e1a3876309b3c1da21b4b41d9f271b29e2f96e5ddeb8af25ecaa2ce231fb85bf22acdc4a191c2fa2cf2c5c5736af0dc0df68a5654fa4856f6ac06331d024475cd0023a6d1db7e74399acfaa6e3899adb2d60bf662cef6d889ae772fab81f810d139d0f22a91a5bf083019e66ad0c7a4ad529852b6ea2f799de72966fbed2b8426d97c3032298d8823f893ccc29fc7ae3e34da5c68758f267cd11507f80bb927e3a7db9ae38cac08a6103505e99a3beb867e57f6da6642dc7bd3878f716b1fc39edb350426f20b0663f76535a183a7a40137b8cac222c2f52e64c9ca6106da4cfefc3669c7b362c8c63089005a06e07b6c15d5eee5fa66901637d376f2ee7358b0aa5e57304c7b7baf4591485b900d1d005e13a2d08edc3b0c96d981ee8f9e6dd5849932794153c16960e7141e0b5ece2ed848580630fbcc331fd70d8678d4ba443403fa24547251fb83c1473e124461d86d6235b2a83e7772274709e685a2d8f14d9217a3e141816c906d6db812a7646f040fdd36076b7b6f67d8ae5d344e46f584c08b2a50f19d40e33e5e727ee0967ecbd566fbd953ac10f53edb65f94f97c284922cbfa78aecd16c8d4c432235e4b880fbfc29e43be4eb2fcbf1c00ff512e8e5db006c12a11934e77a1fe069cdeeaf9bc2c296089540bbccf68e1ed1723a3e350c2d0a45ae68d983c1d9b95f974ade8eb414f7c2e9d6d1f83031a16ecf418e54a56120c5668e16eaf41edd605d161df62fa5fbbdb4b274fd7b7390294a641598e724c48ad2756079a7e4006d43c8e2d9c4694829f7209ff9b39c308535e943f5eb4ef412dc1abd1c29dc449a52055a25f01a6c9ad4aeb55dcc10a97f96837c10e493d1efc6e193be6821fc58374108883270022dd4a04b0f5e908c706d998e3cc8b16ff902976d352c4c194d105c3c7fdb158572a7e84947175b60b7f4ad97a171a642794e8d46e0a0ac13fea6026ece7bf4fab67f149b499b39ce3b33071e8973258ecfa44315051635c187b4a365813792ea9b8b3e005d4e750d0cedf3c82cccf5eb2390b9384e98b82de57fb16e199175a39a6b2b39ef8abae573877af2b92998a0a3ca8fe707fe19cbdd5a55c0e54b7fc763a1e2629d7a6689fd23fbf253fb569706c318a9da321df737ce4b9bcd63aa46868000da294409", 0xfe0, 0x483e}, {&(0x7f0000000200)="84f446a627a0b79c96e18fb3b522ae2bd2776c4056b0", 0x16, 0x8}], 0x41400, &(0x7f0000000300)=ANY=[@ANYBLOB='check=strict,dots,dots,dmask=000000000000000001736\"1,measur,rootcontext=uncned_u,hash,uid=', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=vfat\x00,pcr=00000000000000000025,\x00']) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x902, 0x100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r10, @ANYRES32=r6, @ANYRES32=r9, @ANYRESHEX=r8, @ANYRES64, @ANYRESOCT, @ANYRES64=r7, @ANYRES32, @ANYRESOCT]) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x2, 0x8e, 0x3f, 0x0, 0x5, 0x2000, 0x1a, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7, 0x6}, 0x12005, 0x1, 0x80, 0x4, 0xf4, 0x7ff, 0x8, 0x0, 0x4, 0x0, 0x7fffffff}, r7, 0x2, r4, 0x2) statx(r3, &(0x7f0000000040)='./file0/file0\x00', 0x2000, 0x200, &(0x7f00000003c0)) [ 856.945250] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=6177 comm=syz-executor.6 [ 856.950148] loop7: detected capacity change from 0 to 264192 [ 856.986186] FAULT_INJECTION: forcing a failure. [ 856.986186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 856.987926] CPU: 1 PID: 6179 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 856.989060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 856.990550] Call Trace: [ 856.990913] [ 856.991224] dump_stack_lvl+0x8b/0xb3 [ 856.991759] should_fail.cold+0x5/0xa [ 856.992298] strncpy_from_user+0x34/0x3e0 [ 856.992911] getname_flags.part.0+0x95/0x4f0 [ 856.993558] getname_flags+0x9a/0xe0 [ 856.994086] user_path_at_empty+0x2b/0x60 [ 856.994655] __x64_sys_mount+0x1e9/0x300 [ 856.995225] ? path_mount+0x1e20/0x1e20 [ 856.995772] ? syscall_enter_from_user_mode+0x1d/0x50 [ 856.996517] ? syscall_enter_from_user_mode+0x1d/0x50 [ 856.997261] do_syscall_64+0x3b/0x90 [ 856.997816] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 856.998558] RIP: 0033:0x7f4827e8ab19 [ 856.999126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 857.001845] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 857.002967] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 857.004038] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 857.005104] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 857.006167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 857.007245] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 857.008340] 15:20:57 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x10, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:20:57 executing program 5: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "ff5765ea131b4d27e1965b5d12d2f5530b1244560c4fbc40f99b6bc043e2fe0ca44b2f55eb9624eacf6cd5adfe4f4b2ae2277fb4737d3ca646ca9ed033a29f3e", 0x11}, 0x48, 0xfffffffffffffff9) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) 15:21:10 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x4d}, 0x1}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) recvfrom(r1, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 15:21:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 29) 15:21:10 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x11, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:21:10 executing program 0: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000080)={r0, r1/1000+10000}, 0x10) r2 = socket$inet6(0xa, 0x801, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x80045440, 0x0) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x44c}, {r4, 0x9110}, {r3, 0x1028}, {0xffffffffffffffff, 0x6050}, {r2, 0x62}], 0x5, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={[0xfff]}, 0x8) r5 = fsmount(0xffffffffffffffff, 0x1, 0x9) connect$inet6(r5, &(0x7f0000001280)={0xa, 0x4e23, 0x3f, @rand_addr=' \x01\x00'}, 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r3, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4dff}, 0x10, 0x0}}], 0x1, 0x4008080) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x280040, 0x0) socket$inet6(0xa, 0x4, 0x6) close_range(r2, 0xffffffffffffffff, 0x0) 15:21:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) 15:21:10 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000100)={0x4, 0x6, 0x0, 0xfffffffd, 0x6, [{0x1, 0x4, 0x1ff, '\x00', 0x989}, {0x4, 0xd19, 0x3, '\x00', 0x802}, {0x4, 0x3, 0x8001}, {0x6, 0x8, 0x0, '\x00', 0x2f89}, {0x3, 0x1, 0xfffffffffffffffa, '\x00', 0x1}, {0x800, 0xfff, 0x3115, '\x00', 0x1f00}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x80045440, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x80045440, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) 15:21:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 13) 15:21:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) [ 869.905952] audit: type=1326 audit(1661959270.083:58): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6203 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 [ 869.907821] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.6'. [ 869.916272] audit: type=1326 audit(1661959270.094:59): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6212 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18bc35db19 code=0x0 15:21:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 30) 15:21:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 14) 15:21:10 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x28, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 870.040137] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.6'. 15:21:10 executing program 5: pipe2$9p(&(0x7f00000000c0), 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) 15:21:10 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x104, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:21:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 31) 15:21:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 15) [ 870.283440] 9pnet_fd: Insufficient options for proto=fd [ 887.040380] audit: type=1326 audit(1661959287.218:60): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6252 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18bc35db19 code=0x0 15:21:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) 15:21:27 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) 15:21:27 executing program 2: socket$inet6(0xa, 0x801, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x4d}, 0x1}, 0x1c) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) sendmmsg$inet(r0, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:21:27 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x110, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:21:27 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) recvfrom(r0, &(0x7f0000000100)=""/227, 0xe3, 0x0, &(0x7f0000000200)=@phonet={0x23, 0x81, 0x21, 0x33}, 0x80) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:21:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 16) 15:21:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 32) 15:21:27 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x11, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 887.049123] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.7'. 15:21:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) (fail_nth: 1) 15:21:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 17) 15:21:27 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x100000) write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x0, 0x4, 0x3}}, 0x14) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) [ 887.147893] audit: type=1326 audit(1661959287.325:61): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6268 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:21:27 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:21:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 18) 15:21:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 33) [ 887.230110] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:21:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) (fail_nth: 2) 15:21:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 19) 15:21:42 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x208100, 0x40) 15:21:42 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 34) 15:21:42 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x80045440, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x80045440, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x80045440, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000080)=0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x80045440, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) write$P9_RVERSION(r5, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="d41c50dbb72a1221b0e924732273efe79081cbd964229a9a"], 0xfffffffffffffde1) 15:21:42 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x2, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:21:42 executing program 2: socket$inet6(0xa, 0x801, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x4d}, 0x1}, 0x1c) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:21:42 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x100000) write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x0, 0x4, 0x3}}, 0x14) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) [ 902.832722] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 902.859695] audit: type=1326 audit(1661959303.037:62): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6291 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:21:43 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x3, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:21:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 20) 15:21:43 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRESDEC, @ANYRES16=r0, @ANYBLOB="b94244b598d0c0c273f42175308c23376c39c0f64e16c9451ff05c7d1664d43c3bd04153d1106324e85a09ebc46eaaed31191867", @ANYRES16=r1], 0x13) write$P9_RREMOVE(r1, &(0x7f0000000000)={0x7, 0x7b, 0x2}, 0x7) 15:21:43 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x100000) write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x0, 0x4, 0x3}}, 0x14) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) [ 902.938006] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:21:43 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)={0x84, 0x4, '\x00', [@hao={0xc9, 0x10, @mcast1}, @pad1, @hao={0xc9, 0x10, @remote}]}, 0x30) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x80045440, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000080)=0x1) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e21}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) [ 902.976956] audit: type=1400 audit(1661959303.155:63): avc: denied { create } for pid=6315 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 15:21:43 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x4, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 903.019015] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:21:43 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x100000) write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x0, 0x4, 0x3}}, 0x14) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) 15:21:43 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 35) [ 903.123936] 9pnet_fd: Insufficient options for proto=fd 15:21:55 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x100000) write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x0, 0x4, 0x3}}, 0x14) 15:21:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) 15:21:55 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x5, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:21:55 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) r2 = openat(r1, &(0x7f0000000080)='./file1\x00', 0x80442, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x11022, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@access_any}, {@msize={'msize', 0x3d, 0xd9a}}, {@mmap}, {@version_L}, {@uname={'uname', 0x3d, '('}}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x10001}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xbe!..#)'}}]}}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) 15:21:55 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 36) 15:21:55 executing program 2: socket$inet6(0xa, 0x801, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x4d}, 0x1}, 0x1c) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:21:55 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 21) 15:21:55 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) [ 914.891279] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 914.898499] audit: type=1326 audit(1661959315.076:64): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6354 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:21:55 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 22) 15:21:55 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000000200)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x400, 0x400, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x9}}, {@version_u}, {@fscache}, {@cache_loose}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@aname}, {@privport}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}], [{@dont_appraise}, {@euid_gt={'euid>', r3}}]}}) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) 15:21:55 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 37) 15:21:55 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x0, 0x4, 0x3}}, 0x14) 15:21:55 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x6, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 915.071980] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:21:55 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 23) 15:21:55 executing program 4: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x0, 0x4, 0x3}}, 0x14) 15:21:55 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x80045440, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x80045440, 0x0) write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x13) 15:22:08 executing program 4: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x0, 0x4, 0x3}}, 0x14) 15:22:08 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x7, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:22:08 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 38) 15:22:08 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 24) 15:22:08 executing program 2: socket$inet6(0xa, 0x801, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x4d}, 0x1}, 0x1c) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:22:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x2) 15:22:08 executing program 5: r0 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x303, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x2, 0x0, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x885}, 0x24004000) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[], 0x13) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r5, 0x80045440, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800002, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '{.-'}}, {@access_user}, {@cache_loose}], [{@smackfstransmute={'smackfstransmute', 0x3d, '-)@@%[#\'/.-,,)^'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) 15:22:08 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x80045440, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000100)={0x0, 0x3db52d8e, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000500)={0x0, 0xfad, 0x94a5}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000900)={0x8, 0x6, {0x1f, @usage=0x7, r4, 0x5, 0x7, 0x4, 0xffffffffffffb180, 0x0, 0x8d, @struct={0x7ff, 0xfffffff9}, 0xf81, 0x100, [0x80, 0xfd, 0x1, 0x9, 0x9, 0x7f]}, {0x0, @struct={0x1ff, 0x2}, r5, 0x2c9a, 0x3, 0x80000000, 0xe037, 0x800000000, 0x8, @struct={0x100, 0x4}, 0xfffffff8, 0x5, [0x2, 0x1, 0x2, 0x5, 0x800, 0x7]}, {0xc, @usage=0x2, 0x0, 0x3, 0x7ff, 0x0, 0xfffffffffffff87d, 0x4, 0x5, @usage=0x4, 0x200, 0x7, [0x25, 0x4c1, 0xffff, 0x9, 0x213a486e, 0xffffffffffffffff]}, {0x5, 0x344b679f, 0x1}}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) [ 928.087375] audit: type=1326 audit(1661959328.265:65): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6398 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:22:08 executing program 4: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x0, 0x4, 0x3}}, 0x14) [ 928.123473] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:22:08 executing program 4: pipe2$9p(0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x0, 0x4, 0x3}}, 0x14) 15:22:08 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 25) 15:22:08 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000380)=0x80, 0x80400) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x44091}, 0x801) sendmmsg$inet(r3, &(0x7f0000000280)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000080)}}], 0x2, 0x40080a1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x4874be7e, 0x8, 0x8}) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x5, @private1, 0x5f81}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 15:22:08 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x8, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:22:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x80045440, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000100)=0xfffffffffffffffc, 0xa3) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x80045440, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=r2], 0x13) write$P9_RVERSION(r1, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x5, 0x8, '9P2000.L'}, 0x15) 15:22:08 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 39) 15:22:08 executing program 4: pipe2$9p(0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x0, 0x4, 0x3}}, 0x14) 15:22:08 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) [ 928.324212] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 928.908238] audit: type=1326 audit(1661959329.086:66): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6398 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:22:23 executing program 4: pipe2$9p(0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x0, 0x4, 0x3}}, 0x14) 15:22:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x4) 15:22:23 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$P9_RGETLOCK(r1, &(0x7f0000000000)={0x28, 0x37, 0x1, {0x2, 0x7, 0x0, 0x0, 0xa, '\x81{!&{*^+[['}}, 0x28) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) 15:22:23 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_group_source_req(r1, 0x29, 0x28, &(0x7f0000000100)={0x88a, {{0xa, 0x4e22, 0x6a, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, {{0xa, 0x4e23, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x83}}}, 0x108) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) r3 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000240)={0x80000000, {{0xa, 0x4e24, 0xfffff001, @loopback, 0x9}}, {{0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x400}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 15:22:23 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x9, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:22:23 executing program 2: socket$inet6(0xa, 0x801, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x4d}, 0x1}, 0x1c) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:22:23 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 26) 15:22:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 40) 15:22:23 executing program 4: pipe2$9p(&(0x7f00000000c0), 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x0, 0x4, 0x3}}, 0x14) [ 943.363920] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 943.365945] audit: type=1326 audit(1661959343.544:67): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6441 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:22:23 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xa, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:22:23 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) write(r1, &(0x7f0000000100)="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", 0x1000) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) 15:22:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 41) 15:22:23 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) sendmmsg$inet6(r1, &(0x7f0000005c00)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0xb2, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7ff}, 0x1c, &(0x7f0000005280)=[{&(0x7f0000000340)="9fdb7862225d91eb499a747f1e1d718ff67726af96ecb149c467a984ed1fa07bd9a28c0e1415ed3a4cbe56e3056b5ef966589c17b2c130fcc05111e72f8ec9972081561b37b59916565000e3d29e9c7b372078a48fa25063adc0e28c3a9d941420b0556a7a80923d4771c3314d664d7fd1b281", 0x73}, {&(0x7f0000003d80)="e317e51c3c01593684ef663c389d2d8d60045d19ea578c23d2d8bd726f541f5660a4013bb4cd765839749137e541dafd1dbf477b098cab41294e6a4590189e6fbc5af3e369561aae13ab4040d0b9ee6af1db5b8a2d1343d2900eb28f652566", 0x5f}, {&(0x7f0000003e00)="5d26cc1a16171ddeee507c7d3495c2b1e0505d6686270093b48a5f013f1345e0bf0a0d48ca2ee023e5a12c4ba90ee3cf7b13568370df6c596a6b08548e09f8d9584b0e8d0ea9916e9c8c913ea23439c58178db5244aababa08954928aa601648b88eeb", 0x63}, {&(0x7f0000003e80)="d9a5a76417a809bbc29562f69131f53014d490f9dc671f1c080b159c7831dc37885d84b812b6740e444caf6874459bf001a3f8874518ca1ad7304e0b1019f81fd710f684b8b95bc442cdfa272eaea0", 0x4f}, {&(0x7f0000003f00)="49b59c228e1cc9b30f2191832b1de1651bc7e3e7d104d38ae2813abae5e6c0bad7ede5d2f2771981edb35ed747f2a8ac5c1df6547a13dcb0c087fc4ddc8a9693f0e77d0aa970f0b2f0a49687479d662def4085509886c1b2389e08e6eaf37772b07ec25b64380926433633b01a1062dae528aa3cda5dec6d0951407419cf3372ffa19af7a4c907e17795f381e55be092ae3710bc225cbb0df6ecdbe5a7f91673401557fb0284acae3b82f053a18a04d815139683214421", 0xb7}, {&(0x7f0000003fc0)="6c505761d5e1e34f284e7c76537d46bacc5da1f2a4b4af085bfec5b00852a68a1b964e4ec67fd5aa67a9a2255709b358ec61643c6bda458596592eb75523eea5ef168456183d68939c6b7b8bc1031f0c0f5e3c6af413389fd0d3d727321f030f056321c7991986936b73892168804bc50d75577afbe16b2d575f5385", 0x7c}, {&(0x7f0000004040)="b1e5ab3e9572795edd6a6bb35e2bc2cdfc885684617afdd02885ab9809754dcbdbfb23ab1a75249f5f95a5a6f82ac2edec6c7f3e246708aa95bf9d5882f851a14dc3def2445fcd1f764148ab97b8df5072a75a222c7a73b2d05a886296a5636ca5a9375375699322145c778daac01834c207f1fdc4d705c3bc938b90c5358cff98e8767aa21eb9637515d5966724e1810ac4367f3885bb830f9ad15c5f46cf919c3d3c3c0d4c0e20b85dea08bd8a609eb4172a40e0bc620c67e90adddcead9818fab300b1ff6746f8fae40b944000eb2d9bdd5655dfbc0a1803ba5263d2023fab13d048f513f840d1507f0efdf3248bc7c40", 0xf2}, {&(0x7f0000004140)}, {&(0x7f0000004180)="984ae081ce6d18e9bf0aa965581df368b045227a2ab5036c03caddca15a569fe1796c62ff62b25eafcaa29b27718c3b26c4b14c761bd846f5c5e26418d8091ec834666a97a820d4328a75165ffdf3ff58f68b1147204e505ff250ad19bf0bceb15cabb5c884878674dc084e4b9c06b5b2fda04f952489607032df0d5baa259d4a764f5fd4e5cf8b73da9f2e4743687838618f8c49aeb79c332490387dc7d04e20eb1ef3383d42e32c17edd06b2aa855c1d073e9a6341bd65841e22981da0fb4630747f46c3cb804d799abf235654fc786362", 0xd2}, {&(0x7f0000004280)="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", 0x1000}], 0xa, &(0x7f0000005340)=ANY=[@ANYBLOB="0000000000000029000000390000020002010100fb0bfc68020000000000000000000000000001"], 0x28}}, {{&(0x7f0000005380)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0xb}, 0x66}, 0x1c, &(0x7f0000005840)=[{&(0x7f00000053c0)="d3a89a0c19485a7d0374c310c08354f123", 0x11}, {&(0x7f0000005400)="e6df846ab2355651f0877f343dc703b188673d43be954fa3d61bf053c5cff5f7f42e44c16d07c59a8c1d70c1219244b7834fe50a42049f1cc2fd4f99d7e2cd58593075ce5c226cbce29cdc27cebf1ddf1f2d2b42c7d96bc16fdba7e74e0b4785b86f90b2c2210bb9a31e0a014b2a1e3f0a246378596744ee7e2a5a27271bfa0dc409ae30dd5bb94458b46ed9bc3d", 0x8e}, {&(0x7f00000054c0)="818ed0139c53d89eabe9f3b86fd8a32488b20151c7d1a0569f2107fd967300ef7939b99ceab5037c68a986761f885a63f36200bda2e02fd90bba402f94df603762e9be7ad93433f074bdc430", 0x4c}, {&(0x7f0000005540)="b3e9473a7c41c4d1f48ba74b560da8fdbcd44eb0963473b9307216534546f17786260cc5de87d3cfe70fb422442eb6e6e5fbf7ce32d56ac6a64d5c6deed226cb4ad21afa1c66db96bb8733873a4dc79a55683c1fa9655c2fab31c6b1f9d028e1e430ce0850cf4774a84fc1baff11b928b1fe7f9529c23ceb4ba8494194fa88a5ca28ef7ba5dd8b1c4316c292523e307e2965863cde437468e6b1e4123f971f3ce17ca85ffcb2b7f5137e820c62e06c9ceb9a25bb8916d55f3131493026716ac5", 0xc0}, {&(0x7f0000005600)="fcc0b5569206ae3f7c4c1399506132cc8b1be7eee680a12b6275af0cc59f3dffbc504237b84e51a95a5b43501d3c4c393c2f688b6ce046cf2bf444888d9740ee99d74e6920bd7c3903197b8e9722f50abd4efe6ac40bd4321c135ec0109ffc1e98a6912424138f4d20044bbb1930c1e83caac03629858966b925fda6a790735ce83fdbc2a19e45cd1ee88baafd80181dd11a90beb629e1ccd3a8bade359a858ca325309ddbfa5543995a94dd42293fadd27d13df07f8fd41e5eb33a09f08366932ca7f142d72cadd860897ab100c076cad11f480623834698862473524ac6d26f344a4de0185", 0xe6}, {&(0x7f0000005700)="a4844ea28c", 0x5}, {&(0x7f0000005740)="639ccf7af262175aef2f39c6cd606981ddf5d2b8fc0e5918f0435089f351f1add62c77c66eae958d88939951bff1e48fad26a191048aa3778d93ee16e902b558249531b6e2a878d07555511526eb7c1698e8ace3204f1f8b69351ed40f251102352a2607cba76ff272f21eb320d5f65b85209fc0642cdb2fb3875fb089d9b6bb835b95a08dbc16c43f8ca51f0c93c1a6de8bef0f3540ca964e055dde097932d6c1730fb3165c09fee9eb4c5de7c8529913de62b241d12c23e050b89a09e83522d898e9cd4d10a988e04c0b646936048c5950e2c617ac1f8514a219859aff049b073546ba7bcf38cb582e", 0xea}], 0x7, &(0x7f00000058c0)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x2e, 0x0, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0xa8, 0x29, 0x37, {0x84, 0x11, '\x00', [@generic={0x8, 0x89, "324b076bd6cd6533d25bcfd6b9aa1177c9b41d176ca858eac44df693431ae11e61454fed1278e91ab1e3cc978a6249badd3040e8ccb811c2b6462ec3d3218e8743e89de30eacd0d0939162b20bdc8b443465b5dbb1e2f13caf4ba6062d6d48dd146a8046fcd3fb4383f522d1b78cbd2db50b24bc060b427fe5ed61114373061f628f8f51dfbf4cfeee"}, @pad1]}}}, @dstopts={{0x88, 0x29, 0x37, {0x3a, 0xd, '\x00', [@hao={0xc9, 0x10, @empty}, @generic={0x81, 0xe, "69f7d055046bbedbd693f41ef813"}, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0x6, 0x7, [0x9, 0x9, 0xfff, 0x1, 0x3, 0x1]}}, @ra={0x5, 0x2, 0x2}, @pad1, @padn={0x1, 0x1, [0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x247}}, @hoplimit={{0x14, 0x29, 0x34, 0xbeb}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x1d, 0x14, 0x0, 0x4, 0x0, [@remote, @local, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @empty]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x33, 0x7, '\x00', [@pad1, @calipso={0x7, 0x18, {0x5, 0x4, 0xca, 0x3f, [0x6, 0x0]}}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x90, 0x29, 0x37, {0x29, 0xe, '\x00', [@generic={0x8, 0x70, "8a4d5cef9575a3f9fd2f532bdb4b98ac509f5d0271ca7c0e38e4050baa06061ce4ced63601a3e2ba9d2f71f58c6b078dc759a5d0cde75d68daba4d18207590d4f4f9aba21a2ffa48344b325f749f43d215972ba343494d0bc2373e079a62a3a1c6e152e9314de30537499e4bb9736070"}]}}}], 0x338}}], 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000003bc0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="d138741146f378f4f7d5c8d1efa037c24e466ed486c26d9cda9f1f57df", 0x1d}, {&(0x7f0000000140)="d7a5c85757f675526f7120ca23009ac070d5223a30a685b4ed76178328d0dea167c3e62aee7aad3d65b0e4d40b0ddbecdca57b390c322a7fd51f95372555872deea86541b761c34d5677953a14bb9645d5418fa599538a45975724d055f8c7e9e24bfdd39cae08f2a53f1151551d84061c14e156ae8404c6f70db7064d4d7eca20f79be92e112184997312835b5c765787c45907d6882bdae19be92f55982c66721121133e359442a20bf807e44987198048ff68cd8855473c0c638f6108a5984a67772d84fe52e8862a0e24aa4e0c4821fb05", 0xd3}, {&(0x7f0000000240)="7bdaa1add9971f353d9b4489a2050768c8a87f1d0ad9f054a01022b06d92e5c48c3149fac335a631d6c4750204e14e55e01c6ea2b2ed3d955e480e31e03ef11ae6605f07c7245c827be53e59a145e6d16b2eafae54c541ae6250a5c61236114f75ec34e6c4e9614d2ef8bd066eb76943f62784d6d534132a1b2081016e86f75cfe6eeaf689a4d2ef8a7ff21467b36f63557735684a992be7119c7f5627152cec60eea8c7d63e270af2f2c7298273b4edcff64fec1cfd74fb8f9b", 0xba}, {&(0x7f0000003cc0)="94e38b195f0fb651d9b57ff65990db2627827125939fc9a7cef25995931479eb96633b192ece4c82204f9306cd880f1517db6911a0ff545c787f2870571745db93439a6cfafbe9a30c7ed358a97bed975fc94bdf6f2f3ac35c5072ed2b05e7da12b613d754c2830501b045378e9063e877da2e97876cc629c5ee792ad384be050cf9acd9bad761dbbe76cf57cf8ef095f36e735ca4ecb7cdda6055aa46", 0x9d}, {&(0x7f00000003c0)="ecf25b8e5ee6ae1e72", 0x9}], 0x5, &(0x7f0000000480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_retopts={{0x128, 0x0, 0x7, {[@cipso={0x86, 0x33, 0x3, [{0x0, 0xd, "d7dfd0c6a42eb5cc6ffef3"}, {0x2, 0x10, "6ddf0bc0ada46daffb55144f9859"}, {0x5, 0x10, "690a88796066811690d929c59f8d"}]}, @ra={0x94, 0x4, 0xfffd}, @timestamp_addr={0x44, 0x34, 0xc3, 0x1, 0xf, [{@loopback, 0x80}, {@broadcast, 0xff}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xffff55b9}, {@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x4}, {@private=0xa010100, 0x2}]}, @cipso={0x86, 0x34, 0x2, [{0x1, 0x6, "056e0e6d"}, {0x2, 0xd, "f56de8f426c00b186a18f4"}, {0x1, 0x9, "7960bb8bea4a37"}, {0x1, 0x9, "2f75d393cf568b"}, {0x7, 0x9, "890b4c945fe5e5"}]}, @lsrr={0x83, 0x1f, 0x18, [@loopback, @local, @local, @multicast2, @multicast2, @local, @local]}, @lsrr={0x83, 0x17, 0x6, [@rand_addr=0x64010101, @multicast1, @multicast1, @remote, @loopback]}, @lsrr={0x83, 0x1f, 0x9d, [@empty, @remote, @broadcast, @rand_addr=0x64010101, @remote, @private=0xa010100, @multicast1]}, @timestamp={0x44, 0x20, 0x4c, 0x0, 0x7, [0x81, 0x9, 0x80000001, 0xb2a, 0x3f, 0x6, 0x9]}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x1b8}}, {{&(0x7f0000000640)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000003900)=[{&(0x7f0000000680)="5dc6e4d856c1ce07277974a45ad687441ec6e230c6604b63de19b16bd680f5cab4cfa45599f9baec461294bec42ebcbfe7227f5f4e", 0x35}, {&(0x7f00000006c0)="fc77df0e88c68ab2e75c718910edd928bd5d54617924c6e2dbdb7d5004e7c7eca7a71f11d07428ef48d5b33feb29ba168f2e247746904988f20459662c936761f421ef8d597c3815229f5ffdc8f7d6aabb19242c0fc59182f23953fedb7851cc6d86ebb43e2754914a1fd71034e243844f06d52414cbb04e37083ba2fa46fcba99f6be3d07bac642829072da66594a5ee34c90f7", 0x94}, {&(0x7f0000000780)="0fb5be04edffe34818cac71da973875a6318009640f83ae2b0fc73a3b26dcc94aba0e6a76b62e2f3da7970cf6262f5ce270eef32031b1fcb309a2ce53c13723a11a8c7d06c52b727501db8529e6af96323276bc9d9005ea3aef184f81d10ec65190d07cbcdd3de6626413cb86c2e9bd4ae257d6e432b", 0x76}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="1250902d58730405655c255ca89f506bd8b317f2312f57d8046fc9352451801a61854eecd58e86d21d07ad0bbac6706f3d1321a449fb098aa9fe0583f269231bd3158c4a431fa10815d13208e23310b0a1d7a65b7438a773f2af0e3e2ae158e8f98d0b3a8c522425884af7559b984a5fe8464213f5c68821287c49e7aa0088710f225dda2f7db2d48e7ccbd32824af502789adc91fbd1d720ab78506574697bf0ec4493db24947600aa0047d6c37dd54e754b7c66903afc475d0b80a9ddb02a585f6d471b740622d2b2db8403fea712b505eed5fc756263c7c3deefc2deff5c759e518edb6682b737480a784f217a4c63c", 0xf1}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="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", 0x1000}], 0x7, &(0x7f0000003980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010102, @private=0xa010101}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f00000039c0)="d51f2505098fd5320ba1b276978385cc98333e06bdfcc1f5122a8b8f9f6298c45d5461e321d577b98b85ddf3f4d014ef2cbeee79b1837ba7aae8f80a8fcd3af01402098baffb9e157ca48bcb3f4a2fd392bea213bf1dd4714bb7dd5a4db8269001ca8d4ae581aae20164cad997529fb5f1546e", 0x73}, {&(0x7f0000003a40)="0c29f27369efea18d503924356f3ebd288f5e0832d4374f70c266faf890415bfa55a3e2f7046b83bdf0f6213f0f15843aed88baaefb653b93d8ac76e393866638b98f647a7b97754e8057855dac5ad5758259f20681a8f68ddf5d053e0a958d17a799ec360987412669005d947cce7177123936c4384a29be377ecd5c97b387ddc52685c0910", 0x86}], 0x2, &(0x7f0000003b40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x78}}], 0x4, 0x4008080) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000005d40)={0x3, 0x3}, 0x4) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000004140), 0x4800, 0x0) mknodat$loop(r6, &(0x7f0000005c80)='./file0\x00', 0x100, 0x1) r7 = epoll_create1(0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000005d00)=0x4) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f0000005cc0)={0x400, {0x23, 0xfffffffffffffff8, 0x80000001, 0x0, 0x8}}) 15:22:23 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 27) 15:22:23 executing program 4: pipe2$9p(&(0x7f00000000c0), 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x0, 0x4, 0x3}}, 0x14) [ 943.533476] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:22:23 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x80045440, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) write$P9_RVERSION(r3, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES16, @ANYRESHEX=0x0, @ANYRESDEC=r1, @ANYBLOB="c1cb152c5e7124c68c274d635c957f941cd5cdbba195a6cda8fa44de8948f54d8102582d49dcadb31e555cacc5eb3be51d30dba402a6429a439db55d3759d6f6c07d2fe2cb64c65f1754426bd0cd6ad4cd68ae443806708a414d984379b7efe33c3e848e8b11287f3268e722be97c4a6fc908db71f156e7aa1bb684f29cce5c7f3f105245540f02c2ab2455cfdf1a6b2cfb66aac8b5a87bdb5afc13317b3177128f1b0f10e16d5fdc13b192685f38b4770ab67fa58a03ef623735b2d2a4c36481cf97897fb3aa5f5bbef67bfeb0f05040a6d525d8e46d8048316eb758e7e6ef75f7361682710056f1b705559eee06f48339e4451c47104", @ANYRESOCT=r0, @ANYRESHEX=r0], 0x13) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) 15:22:23 executing program 4: pipe2$9p(&(0x7f00000000c0), 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x0, 0x4, 0x3}}, 0x14) 15:22:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 42) [ 944.160625] audit: type=1326 audit(1661959344.338:68): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6441 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:22:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 28) 15:22:36 executing program 2: socket$inet6(0xa, 0x801, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x4d}, 0x1}, 0x1c) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:22:36 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xb) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @random="b0426c949b7a"}, 0x10) 15:22:36 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) 15:22:36 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xf, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:22:36 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x80045440, 0x0) write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e69d4562ad8295f3f1d1978d55c4dc754d4cb901556532e3b0425fac4cf8b6737eba9fb990bcda59c1994b2a1372c4512712817eb07d33620bd955139b036d53b03b1688ca955b09b064e147f2e1e7269fa38982a9ea3f3106e10eead93e7451deb58108c0fa0d3f06a1e4f3370ac79fd7d2f680b62401f101c93b05b680b475671dd1ffb4be8290784fd639", @ANYRESDEC, @ANYRESHEX], 0x13) io_uring_setup(0xead, &(0x7f00000001c0)={0x0, 0xc9ca, 0x0, 0x0, 0x30f}) 15:22:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 43) 15:22:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x5) [ 956.139980] audit: type=1326 audit(1661959356.318:69): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6497 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 [ 956.150504] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:22:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 44) 15:22:36 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:22:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 29) 15:22:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x3, 0xff}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) 15:22:36 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x48, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:22:36 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) 15:22:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 45) [ 956.353507] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 956.965491] audit: type=1326 audit(1661959357.143:70): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6497 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:22:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x8) 15:22:49 executing program 5: write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x13) 15:22:49 executing program 2: socket$inet6(0xa, 0x801, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x4d}, 0x1}, 0x1c) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:22:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 46) 15:22:49 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x4c, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:22:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:22:49 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 30) 15:22:49 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) [ 968.897024] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 968.905994] audit: type=1326 audit(1661959369.083:71): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6534 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:22:49 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x60, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:22:49 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x100000001, 0x6, &(0x7f0000000540)=[{&(0x7f00000001c0)="facd276eafccd7b37276b8c70b55ce8a1a756e63e6b722429afd0c68ce0765eb24acca123ea56c9e7799e0ad860a93d1da5307daf31e5c9437f518a8e82b4512daa5585c2a7f589bb78b6e4b46e043b0047e98634c23681d43c9bc5a29", 0x5d, 0x9}, {&(0x7f0000000240)="0309c8566493c5076dd9838b9a696d0427af0ee6a47b94e1b8c480a5ddb812fbdf0c0f38e1cf1473b8818864a11ec84db5262b2d2f2f93a499de904cb868e67f0ada435fa13b28a8ebbc5d94dfdaeb42d7d8581fba271ff394c167d040cf7defe1608f76050c1a336772189bbfb755b0ad49f0b0a5de2a0d3a9f05e15beb1ed8fbb7afa51a8a42ba", 0x88, 0x7}, {&(0x7f0000000340)="1b946e3ef7f24aedba23226315ee2e23b1ea0047dd0a30c9269b451f9f2d5a52607e54e065ed19d2bfa15bca6c05f6dbfb15a252be0b358e190015b3e55436ee7c2809b572d4a04b82f66bc80d5b15cff49f5d71d70df7a53a3d35f4b0d1346ef6c0ea6907842714e148526054a0781a439bb47daf0344dd50bfce338cfce9e412aed6b29c5e6cd16befd728ac1b316aced5", 0x92, 0xff}, {&(0x7f0000000400)="c246798d921f47acbb80203d6d97e29665c97efc8e61453bf3f80d45879c6c37ded28c0e852fa870783d0f6e32a08e", 0x2f, 0x5212}, {&(0x7f0000000440)="d72f1fe7f3f11681f915038bb322b25153c61302ec5ada168417ddf8732d646b7700ac529e6085c4a597caf8926319001e2d6dbfb126e7346340573d4104040309943d547c6244fb3922f84eed696f2dc333d13914cab7129d8063b49397e3fe6f13942abe19131049eeafe7751a7397e8b9f70bf466d4307a5cd7520e2ceaba49005231ae8528d049033d9f24ae27df73ea756fc74393ef7ef8a21d", 0x9c, 0xc70}, {&(0x7f0000000500)="dd7aca0edb00fbbdf718ac10adac5824ba5839c7fb22", 0x16, 0x401}], 0x1020000, &(0x7f0000000600)={[{'{'}, {'fscontext'}, {'nodevmap'}, {}], [{@obj_type}, {@obj_type={'obj_type', 0x3d, '}'}}]}) 15:22:49 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x0, {0x0, 0x4, 0x3}}, 0x14) 15:22:49 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 31) 15:22:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 47) [ 969.080022] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 969.089043] 9pnet_fd: Insufficient options for proto=fd 15:22:49 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x68, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:22:49 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 32) [ 969.150511] loop5: detected capacity change from 0 to 264192 15:22:49 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x0, {0x0, 0x0, 0x3}}, 0x14) [ 969.193445] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 969.700493] audit: type=1326 audit(1661959369.878:72): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6534 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:23:03 executing program 2: socket$inet6(0xa, 0x801, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x4d}, 0x1}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:23:03 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 48) 15:23:03 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x18) 15:23:03 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14}, 0x14) 15:23:03 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x6c, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:23:03 executing program 5: syslog(0x9, &(0x7f0000000000)=""/128, 0x80) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) 15:23:03 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001880)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000001980)=0xe8) sendmmsg$inet6(r3, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1ff, @loopback, 0x6}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000100)="119e5e1679e23389cc78a897f73264078d6c41ab70e219d2577ffb12d3b2866d09ea4e6c583eb875479797e318d0b7684bbe2773a13dc0dc2016b9c732320c77f32e4d68fe7e2ddf1219db271c06a9ded4ce111cbe53bbec6f6b49bae666a310f6f4818ba124db5e9f9c8088c3da45bcab2c336547ba0c0aef55137981bb9c1801b410003e1ae96320efff927bfc4ef201a73e5b94bc9631076bae6a3b0168e4c0bdc959bc4f9d1ffc191a05a7", 0xad}, {&(0x7f00000001c0)="4d69b2c3e93e52216933ced2b9d264a95c77debbe4eb09f9ff553881700d97fba8a65dd35362c83f70a0e9d61f23f16991b1babbd38280eda7c4963919ff30c773497d141fa8d540cca86b435fbcef57ca86738d794b1705ef08bc21f9b4aa9bd048064871a472062828aa671838d87afe01be074b8c862112cdb5519a719a34740f51967c16dbb741ce48544339632d2962ef2ddf4d97c0cd2c5573a9d227a53614979c5166d036863fece8a2efac054678d919ce127fec95ff480299974e7d754f447e7c", 0xc5}], 0x2, &(0x7f00000002c0)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x67, 0x8, 0x2, 0x3, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3b}, @loopback]}}}], 0x58}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000340)="213f29d033c00668db57c5835b5819d9160ec5d8f0c95d994f1cebd835c9d9af511b239e5840c92871a7ddb55888d1dfb68a348f02c2b8e94e58665b2444fdc4427d3988d7f346bc0dc2976bcc3bffb6b8a177b2330c474bee4c0b8c116ecaf44f1aecd7be11dc80ba9133d0d7f8bea0eb98fa9cd95c164ede7c6c7e3ebd4e57191db2d49adb89a904bcfadd65defe9b69a0dff3063056f99535532bc61366f51b738fa69bbadac2901b231d326f5bb3d878c680ebe2bd4c85f9e556121a85803844952a117f84ef9caf2fd7e31a06f63971882449fce8e4d76c91111bb5", 0xde}, {&(0x7f0000000440)="68c4bb9cbd343fb0de26d3f6903ffae9e7341579f9151affb9b215a7fef1059909df6b07757848a8b39b62b7be6810b3f051468e877cf3d747a0806ac2fc29cf0b90517a15a5bb39eb9c749b0f0e955a7e4f89e5124cd4", 0x57}, {&(0x7f00000004c0)="56371325e9e06a9b35ce1cac1b093e58f9d72193f0c5eabb941d938978c4787101a6cea3e477766ad16f82aa674807671133eb9b9041b9cdafc1fd64fde9ed5f058aa95c67fc6377b681c4660f4d34b4eeef4b5549ffbf7b8628fca3c919a5a6d1fc88d0682c1b5a9ac789b143a05acb8c44c6442d6865f0a4c5438f1b8e3887667cee5fb27e5fec54fa37fac23b8db6074fc7c42050814ade9bb5f18b18c55996f01bf280f53b308f6fd68309f6a422e2ac8d4f547967ba5a38", 0xba}, {&(0x7f0000000580)="807f277b1630f46d244bd661f5c690d6e72b0f26bf7a25963bada07cbc6d46aecfe89f8304a66b6d562bc96a14a1076889d68fa31901107a9e1f4f0ecd437fec4b28c95dfc2ead37a2fc560bdf23f0efcd653b863bc5ba007ae273927f37b246dc43d910b70900b530eebaef5523fb65d089fccc59bfa7baf33d4e5b9bcc1bf98333df9cda0d9bedac655725f08b25d6a4c7a3b78e5b8813f231f3797839adb568b48fd933ec0f97c6394852796fb9b18bb010730cfc3f8809a4cd8da70ed49f90abe6dcfb0fba9448543dafb5a1c449acc2095e5f3a8e4b4b79fcc6b11085d83ea80cf4c49d1ede3d0356", 0xeb}, {&(0x7f0000000680)="5ef64812a2bf74eeb65c21d42f36c0c5cf183e49cfe8f612826bc7080d551513752906a49c", 0x25}, {&(0x7f00000006c0)="e4cde6ebccc244b21215cfcc82224044fa5edbd1d8b2fb415de25efebf839e0a9da4dfdf4f1266fd86ded41ae8ab59390668e362dbeccb02832fcb72fcc0ed3c29971ed711d004f43eefa9807be2842ccb5409594d7a08f7805afa77a690cf2019b3a581344976d117d3ac7109668e56e877c6838fc871408854e420a77bace9a3f66bfbef3d373c5f3c9d5f1edacbb344687d8d66c2952555b6f3c1ad67fac6ddd58282cd65e603e77e29fcb2b641b0e1b7ff74763c1051751ca7f7bd19c8969ffc4d1504feac1a9fad370bc79308bca28bafc22f7e8b1720d30cf396fb3f19e71e9eb9897ee25dee789beee39f484456e3777c6ff6bf710970720ad613ae3b3fead0b7add399a52e03628e0b19484b25632dd240c7fa3e744ea386d4d1ea04644bdf26af7367edcc75a7b894af9e918b93e0106ebfe8e9067c82f6fd9438a88e7fcf9dbd139f64ed04aff2ee13f1e2a94ee2f538069694ca251bb8a63a5caac30702aad60ae84ea64f429afbaa373a8e70df6fec49ea7d39a0a93c1523679ed0879715925d0cf02dd37dae7da4a95a2045f3c206ce61272b2ca2d8e559a086b4bf4bf020e6fa486c31faccd26570fb7c0ec33d722289e268b80825c90b76e96bd5f44ecf12092b4bf94f8794972663834b62a53af489d2f04475dbc355ee90cf95bda23ca8b839cc89879ccccae84fb1ae57e60b02ee9b0f7a29ab62ef9c87cd6087440916059411991c59e7d12369cf873e0d6762755deedac56bed6a54d79671dc2998f1d78017b3f7b07a996f09e2a24e350b6899c6e415884977089e55edac670f462f85b80245c652dff4a6ba135588ddf2d326148ef4a84c4cd985d5af8f3aafb87db8a9aa9af29ddbe67e56089ed8da5cd14b4630044d021d9ab5d5df6d4f2f825346715c0dbb92e76e5d6d06b3e972015e5f9020f946796f6be1d3f13f1c04920bc39f17d4ad1dbb6a856bdbbe19996b28dd7aa266a9a05ca18589ae2290f887e8f4a0b51529128c57625e60315984174153917f301af7024081c959ef4651e27130e80f8da393b58f0932f94d232465d1ce0df0c04a3503c790c6243431254cf205d61a3977db62a3a07e3fcdd4fe8119687bb0b991d973af68c2661c9d430b147d140a26e68dfef527f76245330ca82309f85323a78eabbab25627805bd7b4eec6883e7f046ce9bf4df5386428d60506a18f28754f9d668e2fe6a4e30d35b18b785518f082b3659524ab39dd627a76b2bc2df84e20c66fc5ebe2a2e7c5874ec4bf18bcd7bde2b1bb2b4068bf7dbeee6b3d4ceedf04b9261f16ebedd651a786a1c34c94cfec348c604e8a21d434550b299f8dc5328d545718144872dd68efa4547684c9e400a54b93dc13fa8e917c4172662d415f513e35f3f633e5f746ebe124318065fcdf989cac9aa10f4cb14d2044995c15b16589ed5515bdf2453e430a5f193a3fea8c1c9a74c20cd4e871a348d6d46e8e225f40e7d88d0b53341ba4108a45b375004025719913eb0ec8c2d73795e66d598001a9e3ec85f78c20e86fb4605dd682dbc07458930a64047f6766daa28ad502672b665b85471a55c0a932ed0b9ab22945ce376f89f7fe6ee3f1749826e8672fde5b701eba6cbb1c1506fa6c4e32d3e1effe9b60decece84f01dd1efe78aa32d442134ea4f1018edcfcfc4ed74233f92b431e3adcdda2a4175b4447aacb651403d1c390d1236fe1a5b84edd2c4d24a28b8d0693ad66f1ce74ab8c5c1f09aa68817e71d3f0068bb8149bd13cf88e3c23bfcf138ad9361fde7cf6a484940b4527aab764e037d7f8ce12c514458e3e4b031c3cf21f372c1f07b0cdea96be7dabca1e98be8be20fe712f64e0f88c3c768983b834eb984937ee3cacb833e5631bc4e48ff74265f2636cdb541aa449687ef5fafc13b739ec1f7f44b0444d41836d4d96cc10c33be85a2e9835a5b359e079a40e7a438e0afc0386e72abe2b4c55864b6bba1e42e6d74b5e1b0b26fd88153af38d156c5a6546b1cf004f22ae1e754786f6897da9551235f64edfc8d1bfb66fc92332b00af43845497d15a6d5cb8e034cb5e2529771ddb37e0e4eab65cff201ce42c3f181ce32bd6fdb7cd5fb9f8ef2cb98497f3f2e26b81104add107898008577e46f998d96b41d07aff07ac7f0dd5d1a13fb51858c47f4ed33877f0e90c8d492266df02af5208a06015815d6df871a9e3bf17273907bb33cee4fb83fee16ba4a1a18ed67c9a33f800c0e1226af26ab8e8d5f76adf8e7d1ce68298995717e481c1c32794ee009373b98da23ae9e2c593a76085000d4fa911c482f34ead5bbdad3822e9aa38fef52e160ad9ee892d4e07c66dba2a66970757ba03cfceb59109fb4babdf8fdbf9c35a27dde35e926e8294748fbf4f46eb3d3eefe9bfd70e7b4cc962b7fdd53d60773a76b646a374498b72314e980c903b539a09274893e066412c928419c22069db226200c2438cb85931ad9d330f3b3aedd985e277424ad261d4ba96e4df1efdf43d01217ec1ee1424369ca07ae4e8ea842ea049c3f420a34c6786d32262e532eec0c4887cf29d9f5dcd863e9fed14e65023fbe402542240429a62b42852fda824a37e86a9bd739988f4bb88bfced7e455b541bed4b1aa4db5a5b4da0da4fd408b64ec50cbe1d90c695e2c38112b126e8c749f0bd1fa1ecd93f65676817973ce3f241ea32c5f3687175e96c30ba8cb36702493f703652a00b6d1bffa5852749e8543047336b531d156ed8b43ee45813f669faf41822cc611647d918846f93b666a82ee3336015a7cc9e296727a39be978e10701b69a083eded9aec74dda20994c23ac5c75294e967b1ace6b0c6ff996cc7f72e89fd4b59c7ace74719f89956ed0aee29a79096b79159585d37403af253f4431dcaf33d785edd47684dab6f1c2d330143461e8f8323ef0249d86a943f99b1fc0e6fee4ce59f6e9f9178bf6e20d2562ba0d1dfa2e3150bdbe3e1f45778b6b92850508e333d7cf0073ab521993918b5d0b4496a53be7f1f57e469f266687c8f5f9c6340b4ee66558bc50c3ac17d1a0eed8a21683ef38f7777b56e9ebb812f020e0819262b41a22cb900259a8743fe2e70e575196e5894b89fa6b66538e1f1ba6bc69c0c8dcc165218b0b2d7dd4615b2202c517c6b0f8ba40bdd17895448e5782e05e182e45c17290105801db337b3c6a51a490af3cdd1f5b408a79f443a10eb7d3e94960826f263fc58c640a2f95dc6eed511e790badb5b217607683f84932bf9d7e97e9f12045bbb0f5b0d7e9a698d6af9646d688704d10e96015a3bab6fc83d288bd9fff5c4508186629a8afd1bbb14fcd1b37a053fd01b3dc587fba80dabdc0d1713297545e9c571c7c012546cf4bb4ace117c4862b28da7b59a0a84bd47551a773e8bf60be6a52a07ccd799563d53e71956dd544c34dcc965f94fa7cd3d0ad18d758b7f3629d92cddc09b63a5d28095b2d699c4c997e741c0f3726c98b3702eba27c4bc0e3a6d79b45b62786c55a7bc917ee59a36757f50c2dee94bd38a522bfd4c9a39a382fb825f90fc22880996d13241b96c7476c0c51028e8e9a7d85a9d1eae35f484a3b5ae61fa13e2c054eff07449c8d97ce0ee3f470bc2e15ffc7530583eaea11e59eca9bd00a4a5ee16192d0eead91cdbe6f22e8a94cb152879fd866304f056749ebd8373a463cf6daa8e047b20c266a77036324c6134f7c513ea9dfa1c0c41b2261834365edde8b2fbd5839eaecbbbce9e47fdb201b26649b012863e0c8adb25a91bda5224b738b8bf8a9b3907c1afe60e307d959b0c714a534bc3d6663b7cc2ecc65489d31a21fef9dedcb03058a08a110cba203538521dce23d023e61416b5d0d29d63592d8b216968b9990de644db661ed66b1bc3df07cbf20bfc466c4cefc23a8b8b845b045ac01573943c3f2ab01a3869201a112c259612b0f85d825c982d76e560986ce71818becfb78c07c9ad234a6c1499db059d2c1b8bfc0216de2c9591a1172452d7947f28c7acc34d3a462a3603321149891e1c1cfbb0f246f046ddec724b3dcb7fdcce94479056d1c24b28a76522b7de74bbebe8229a8346b5c9a3c9fc72ee5b92bdb4e9fb858bd6e89cd39d1f9d75e27114acd3be023ec1cf168aada20a309b1bf4b3a976f3a6938eac343f1c348ed02701f5e8167538fc85ff689492182099282c5e501c76506b7a4dde2a8bdc857c27cdda07f5f0daa59e8a5083d47b3389a546d818f2e2a02e76c8427888376ddeebd27683e0f72404f22a809125a343b41a1c5bb30c61da9ab881cc8ca085da2c28426591a2e91fbb765489471629bc7eb6ffa52bc58792224bf3806f37d9d204049b884678f77b4815031a9dffc77611475a44e8ad0ae29c4d53abe6547f01702562e6ab261347fcf0bd41ac96932e34d193b4ee4e3c695fbb6706a2fc9b34277358366cb2f5c54b566600d7085f36999fc8aadc5d6c635dc396b8e3100835d0ba8e33e44139342cf441887c5b20411bd0882dd9e1a8dc5a9cb608b83836d646c495f13a0c7be4fc082d6ab8b2c1975e3dd18ffa6337379fa4f6369be1f44d175e3b17fc4b3882911da0651360e9ba6e2f23a35ea5a4bc95743cd14e35d52d9ad355585f57ff6c7b5420e41ccaaceea696ab5d12bde7b8d4eb005afd26c1afb4ff6e681f89729c575da4472116749ffc2a22204142d341c046876144674b620e9b8522764fab9ba8d71cc61ed291075d256e0342df85ddbf237b22f1091b8b5619134d4fe4f3762f8c0f8e3771d8da05cae577593f635372ad0bf5abcdb0a55b5967a564e6acbec5f7e8deec0295071c3f8b1606233efd8ff879b16deba13a3b36cbe436d96083418a582859fa355a0c643ab7fa9104876f731e788cae6d69cb39eda4298ad4efcca07aa27b0376025522932939cb634da74731d4cfda6a9f0b1929bab195e77ded6947c0320ed04fdfd512241282d60e6a2ef03e85b0d5cc2c82dcf76161e4658bacfeea74596571498e87ffcf52fd92fb2888600150597c15a78b937387f6e43ed45494ed16465ad7e15ebf8495dadd16a43bcfd2fd9bf0c6ca042916321d79e04a960b35bf9bd50855749e1559efd9127119944e55406ff32f9cf2e339048acfeaa30d48944ccfa67375c75ab1bf8e2fb0589c2ebc4c0403482f771a425f1fc9c637520bd5892e5b5aff936aeb78ce0ab9785815c6d4990cb7c8d28efd9f8612931317b03462b381967ab39140bcfcd095363e7cd9fca57f6f4be5de0ed801772cb5cb0e1fdda13a5eeddcf365f333ab34a71c9f16389e76ae59ffdb2e91aea30d4808dc2e11033fd4c406181ef8454184222bd03b43a10a6e08f7654cb60303acb76d99a5f2f09db4b0b6d80a3d3e0242b4b622ab2fac35de80c10b4a37f99a28934112c2e8b7bae73685f7abbf9688340aef76e1635db813f85a0bbd186cfbb70a4e2fbcb70a20ea6d63cfbaeeb2ed1c1ce4400bed36a85daed3f514c56b2d3355355ffb44e6059e8dafafcbf2d976cf45a133094401cf14dc9451cc4d16ecd4f879b2a25b482e256871b9ed841f6651287cba563797cae17d76e2158721a5267f962aa6ce32bf7abb0ab214db5faa8eb60420ccc0b9cd95e3ca9885b7eb89e0236db054b3017065e6a42441614aaf82216098bfc438fba20452c3a024b92b9412931e341e54dd02c46022192c21a71dbeb5f47d684c3a0ab8fbdf78a139cf99ac7b2606955006442603886ad325762224431c060ebd2a8a59d940acfa0adf7ce530ba99ae85cec907b98d6e97de41cbfc621c7d62f4d1e4a2e81a", 0x1000}, {&(0x7f00000016c0)="ffd0f43dfe46314333cb380bdce1cc839aecf68fff0589e48cfce1cfc4b3207a5fec06903ea67c36c42f5c7d25f2a6c194b6935786b8785a8d90320136a6af31adca6432b87a631be22dd4602a2baa64bb27a3cb774e932213334f7fa3d7676469fc5c5e3b552b40ed3e7f92cfd2ef9a92bebaceec6b15c1625c6d9f44b79faa494e9bfe996d9b662d425c3e7b5714e69ce17c5229fc59b74aa0dc00e784612b11e6d42c3622ee2093fb356e", 0xac}, {&(0x7f0000001780)="2e73a3ec275af3ce2a0ba6d4525ec1a03eb5bb346fea5731eae2b5bd4a3c9b7572ce05d8285522ac15bf512a0412616c4b522ced3263f9a8491c18674d3e33e0a53e86998446f237243328c8e2e81f1d3aec8ad4d8912d80a1c995eaba061324693121fbc57841e73bb13bc39e5793", 0x6f}], 0x8, &(0x7f0000001c80)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0xffff}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0x3c, 0x10, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x58, {0x3, 0x14, 0x4, 0x8, [0x0, 0x5, 0xaf0, 0x8000, 0x6, 0x1, 0x5, 0x200, 0x3, 0x0]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @jumbo]}}}, @dstopts={{0x138, 0x29, 0x37, {0x1d, 0x23, '\x00', [@jumbo={0xc2, 0x4, 0xde07}, @generic={0x3, 0xd7, "ae0ac96e00bb945b2ef5854588ddb31296ee6ca3c77c3a628f836ebab80210711884c65d1554f33917cd28268da5c7b0876739214acd6bbf553baa10fe80c67f55cff487fe52f273897d09241d7aa5f64f4674ac1bcd738c86f22832a4eb206b2aed62ed0b3a501ab7b964471526f788ebfc1440c557aa40c956f979bbab8191ca33a84cf303dd9d21cc0e91ed80d73f4b092bb95bf25395769643b020b1f216f267d40cd19fa1445dc2eaf2217b1cfe7ed75f3b2e0de58913237c634017e4ab3109d4a23c085af5b820455f0be867e664c1eac5319212"}, @jumbo={0xc2, 0x4, 0xffffffff}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @jumbo={0xc2, 0x4, 0xe7}, @generic={0x7, 0x6, "e36a99696a59"}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x29, 0x1, '\x00', [@enc_lim, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r4}}}], 0x258}}], 0x2, 0x4008840) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:23:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 33) [ 983.006861] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 983.021658] audit: type=1326 audit(1661959383.199:73): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6591 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:23:03 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x80045440, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) r3 = open(&(0x7f0000000780)='./file0\x00', 0x200000, 0x92) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000840)=ANY=[@ANYRES32=r8, @ANYRES32=r4, @ANYRESHEX, @ANYRESHEX=r6, @ANYRES16=r5, @ANYRESOCT, @ANYRES64=r5, @ANYRESOCT=r7, @ANYRESOCT]) write$P9_RGETATTR(r2, &(0x7f00000006c0)={0xa0, 0x19, 0x1, {0x0, {0x20, 0x4}, 0x83, r6, 0xffffffffffffffff, 0xf2, 0x4, 0x4, 0x7, 0x1, 0x80, 0x7, 0x4be, 0x7, 0x6, 0x1f, 0x6, 0x0, 0x7f, 0x2815c362}}, 0xa0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000100)=""/207, 0xcf}, {&(0x7f0000000000)=""/13, 0xd}, {&(0x7f0000000200)=""/199, 0xc7}, {&(0x7f0000000300)=""/148, 0x94}, {&(0x7f0000000040)=""/57, 0x39}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000540)=""/147, 0x93}], 0x9) [ 983.048876] 9pnet_fd: Insufficient options for proto=fd 15:23:03 executing program 2: socket$inet6(0xa, 0x801, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x4d}, 0x1}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:23:03 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x74, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:23:03 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 49) 15:23:03 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x100000001, 0x6, &(0x7f0000000540)=[{&(0x7f00000001c0)="facd276eafccd7b37276b8c70b55ce8a1a756e63e6b722429afd0c68ce0765eb24acca123ea56c9e7799e0ad860a93d1da5307daf31e5c9437f518a8e82b4512daa5585c2a7f589bb78b6e4b46e043b0047e98634c23681d43c9bc5a29", 0x5d, 0x9}, {&(0x7f0000000240)="0309c8566493c5076dd9838b9a696d0427af0ee6a47b94e1b8c480a5ddb812fbdf0c0f38e1cf1473b8818864a11ec84db5262b2d2f2f93a499de904cb868e67f0ada435fa13b28a8ebbc5d94dfdaeb42d7d8581fba271ff394c167d040cf7defe1608f76050c1a336772189bbfb755b0ad49f0b0a5de2a0d3a9f05e15beb1ed8fbb7afa51a8a42ba", 0x88, 0x7}, {&(0x7f0000000340)="1b946e3ef7f24aedba23226315ee2e23b1ea0047dd0a30c9269b451f9f2d5a52607e54e065ed19d2bfa15bca6c05f6dbfb15a252be0b358e190015b3e55436ee7c2809b572d4a04b82f66bc80d5b15cff49f5d71d70df7a53a3d35f4b0d1346ef6c0ea6907842714e148526054a0781a439bb47daf0344dd50bfce338cfce9e412aed6b29c5e6cd16befd728ac1b316aced5", 0x92, 0xff}, {&(0x7f0000000400)="c246798d921f47acbb80203d6d97e29665c97efc8e61453bf3f80d45879c6c37ded28c0e852fa870783d0f6e32a08e", 0x2f, 0x5212}, {&(0x7f0000000440)="d72f1fe7f3f11681f915038bb322b25153c61302ec5ada168417ddf8732d646b7700ac529e6085c4a597caf8926319001e2d6dbfb126e7346340573d4104040309943d547c6244fb3922f84eed696f2dc333d13914cab7129d8063b49397e3fe6f13942abe19131049eeafe7751a7397e8b9f70bf466d4307a5cd7520e2ceaba49005231ae8528d049033d9f24ae27df73ea756fc74393ef7ef8a21d", 0x9c, 0xc70}, {&(0x7f0000000500)="dd7aca0edb00fbbdf718ac10adac5824ba5839c7fb22", 0x16, 0x401}], 0x1020000, &(0x7f0000000600)={[{'{'}, {'fscontext'}, {'nodevmap'}, {}], [{@obj_type}, {@obj_type={'obj_type', 0x3d, '}'}}]}) 15:23:03 executing program 2: socket$inet6(0xa, 0x801, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x4d}, 0x1}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:23:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 34) 15:23:03 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) [ 983.201281] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:23:03 executing program 2: socket$inet6(0xa, 0x801, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:23:03 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 50) [ 983.262165] loop4: detected capacity change from 0 to 264192 [ 983.279153] loop4: unable to read partition table [ 983.281328] loop4: partition table beyond EOD, truncated [ 983.850398] audit: type=1326 audit(1661959384.028:74): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6591 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:23:16 executing program 5: r0 = add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000580)='syzkaller\x00', &(0x7f00000005c0)=@keyring) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000100)={0x0, 0xd7, 0x0, 0x1}) write$P9_RSTAT(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="420000007d010000003b00010005000000200000000002000000000000000100098c05000000bd9600000600000000000000030024232604002c2c2c400100000000357e422b0300e7af7117ba70f363e529b1865c8d95175893a84a6f133414f8064a5c535e8dc3b1ae93a229d1f3bd9aed1195af70ef6c1c5ee2fdf2eab40d74da486fb89fcad847ee0dc5207afb728b24b9e043856397903766eab87ec98a7b68d75ddab75e36f2"], 0x42) 15:23:16 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x100000001, 0x6, &(0x7f0000000540)=[{&(0x7f00000001c0)="facd276eafccd7b37276b8c70b55ce8a1a756e63e6b722429afd0c68ce0765eb24acca123ea56c9e7799e0ad860a93d1da5307daf31e5c9437f518a8e82b4512daa5585c2a7f589bb78b6e4b46e043b0047e98634c23681d43c9bc5a29", 0x5d, 0x9}, {&(0x7f0000000240)="0309c8566493c5076dd9838b9a696d0427af0ee6a47b94e1b8c480a5ddb812fbdf0c0f38e1cf1473b8818864a11ec84db5262b2d2f2f93a499de904cb868e67f0ada435fa13b28a8ebbc5d94dfdaeb42d7d8581fba271ff394c167d040cf7defe1608f76050c1a336772189bbfb755b0ad49f0b0a5de2a0d3a9f05e15beb1ed8fbb7afa51a8a42ba", 0x88, 0x7}, {&(0x7f0000000340)="1b946e3ef7f24aedba23226315ee2e23b1ea0047dd0a30c9269b451f9f2d5a52607e54e065ed19d2bfa15bca6c05f6dbfb15a252be0b358e190015b3e55436ee7c2809b572d4a04b82f66bc80d5b15cff49f5d71d70df7a53a3d35f4b0d1346ef6c0ea6907842714e148526054a0781a439bb47daf0344dd50bfce338cfce9e412aed6b29c5e6cd16befd728ac1b316aced5", 0x92, 0xff}, {&(0x7f0000000400)="c246798d921f47acbb80203d6d97e29665c97efc8e61453bf3f80d45879c6c37ded28c0e852fa870783d0f6e32a08e", 0x2f, 0x5212}, {&(0x7f0000000440)="d72f1fe7f3f11681f915038bb322b25153c61302ec5ada168417ddf8732d646b7700ac529e6085c4a597caf8926319001e2d6dbfb126e7346340573d4104040309943d547c6244fb3922f84eed696f2dc333d13914cab7129d8063b49397e3fe6f13942abe19131049eeafe7751a7397e8b9f70bf466d4307a5cd7520e2ceaba49005231ae8528d049033d9f24ae27df73ea756fc74393ef7ef8a21d", 0x9c, 0xc70}, {&(0x7f0000000500)="dd7aca0edb00fbbdf718ac10adac5824ba5839c7fb22", 0x16, 0x401}], 0x1020000, &(0x7f0000000600)={[{'{'}, {'fscontext'}, {'nodevmap'}, {}], [{@obj_type}, {@obj_type={'obj_type', 0x3d, '}'}}]}) 15:23:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:23:16 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x7a, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:23:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 35) 15:23:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 51) 15:23:16 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x80, 0x20, 0x1e, 0x6, 0x0, 0x3ff, 0x12000, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000100), 0x7}, 0x240, 0x200, 0x3, 0x0, 0x7, 0x3, 0x14fe, 0x0, 0x9, 0x0, 0x2}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3b, r4}) 15:23:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xd3) [ 996.452779] 9pnet_fd: Insufficient options for proto=fd [ 996.459846] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:23:16 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00') accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) recvfrom$inet6(r1, &(0x7f0000000100)=""/193, 0xc1, 0x2021, &(0x7f0000000200)={0xa, 0x4e21, 0x3ff, @private0}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r2, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x80045440, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r5, 0x80045440, 0x0) close_range(r4, r5, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/crypto\x00', 0x0, 0x0) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f00000002c0)) [ 996.489997] audit: type=1326 audit(1661959396.668:75): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6640 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:23:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 36) 15:23:16 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r2 = inotify_init1(0x80000) getresuid(&(0x7f00000002c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x42000240) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1082, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@mmap}, {@aname={'aname', 0x3d, '\\\\'}}, {@cache_fscache}, {@access_client}, {@loose}, {@access_user}, {@cache_fscache}], [{@fsname={'fsname', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x61, 0x0, 0x36, 0x64, 0x33, 0x64, 0x34], 0x2d, [0x64, 0x38, 0x0, 0x62], 0x2d, [0x0, 0x0, 0x66, 0x38], 0x2d, [0x32, 0x30, 0x65, 0x30], 0x2d, [0x30, 0x62, 0x31, 0x36, 0x34, 0x51, 0x34, 0x32]}}}, {@obj_user={'obj_user', 0x3d, '&-\'%\''}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '@:{/.'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@dont_appraise}]}}) 15:23:16 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xf0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:23:16 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x100000001, 0x6, &(0x7f0000000540)=[{&(0x7f00000001c0)="facd276eafccd7b37276b8c70b55ce8a1a756e63e6b722429afd0c68ce0765eb24acca123ea56c9e7799e0ad860a93d1da5307daf31e5c9437f518a8e82b4512daa5585c2a7f589bb78b6e4b46e043b0047e98634c23681d43c9bc5a29", 0x5d, 0x9}, {&(0x7f0000000240)="0309c8566493c5076dd9838b9a696d0427af0ee6a47b94e1b8c480a5ddb812fbdf0c0f38e1cf1473b8818864a11ec84db5262b2d2f2f93a499de904cb868e67f0ada435fa13b28a8ebbc5d94dfdaeb42d7d8581fba271ff394c167d040cf7defe1608f76050c1a336772189bbfb755b0ad49f0b0a5de2a0d3a9f05e15beb1ed8fbb7afa51a8a42ba", 0x88, 0x7}, {&(0x7f0000000340)="1b946e3ef7f24aedba23226315ee2e23b1ea0047dd0a30c9269b451f9f2d5a52607e54e065ed19d2bfa15bca6c05f6dbfb15a252be0b358e190015b3e55436ee7c2809b572d4a04b82f66bc80d5b15cff49f5d71d70df7a53a3d35f4b0d1346ef6c0ea6907842714e148526054a0781a439bb47daf0344dd50bfce338cfce9e412aed6b29c5e6cd16befd728ac1b316aced5", 0x92, 0xff}, {&(0x7f0000000400)="c246798d921f47acbb80203d6d97e29665c97efc8e61453bf3f80d45879c6c37ded28c0e852fa870783d0f6e32a08e", 0x2f, 0x5212}, {&(0x7f0000000440)="d72f1fe7f3f11681f915038bb322b25153c61302ec5ada168417ddf8732d646b7700ac529e6085c4a597caf8926319001e2d6dbfb126e7346340573d4104040309943d547c6244fb3922f84eed696f2dc333d13914cab7129d8063b49397e3fe6f13942abe19131049eeafe7751a7397e8b9f70bf466d4307a5cd7520e2ceaba49005231ae8528d049033d9f24ae27df73ea756fc74393ef7ef8a21d", 0x9c, 0xc70}, {&(0x7f0000000500)="dd7aca0edb00fbbdf718ac10adac5824ba5839c7fb22", 0x16, 0x401}], 0x1020000, &(0x7f0000000600)={[{'{'}, {'fscontext'}, {'nodevmap'}, {}], [{@obj_type}, {@obj_type={'obj_type', 0x3d, '}'}}]}) 15:23:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 52) [ 996.611332] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:23:16 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x300, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:23:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 37) 15:23:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 53) [ 996.707008] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 997.303709] audit: type=1326 audit(1661959397.481:76): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6640 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:23:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x11a) 15:23:31 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) 15:23:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:23:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 54) 15:23:31 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x500, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:23:31 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) 15:23:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 38) 15:23:31 executing program 0: socket$inet6(0xa, 0x1, 0x1000000) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x5b, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x0) sendmmsg$inet(r2, &(0x7f0000004380)=[{{&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x8000) [ 1011.247322] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1011.253473] audit: type=1326 audit(1661959411.431:77): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6687 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 [ 1011.255308] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -22 [ 1011.257111] CPU: 1 PID: 6692 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1011.257715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1011.258569] Call Trace: [ 1011.258771] [ 1011.258950] dump_stack_lvl+0x8b/0xb3 [ 1011.259250] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1011.259667] p9_client_create+0xc85/0x1050 [ 1011.260002] ? p9_client_rpc+0xad0/0xad0 [ 1011.260320] ? lock_is_held_type+0xd7/0x130 [ 1011.260672] ? lockdep_init_map_type+0x21a/0x7e0 [ 1011.261045] ? __raw_spin_lock_init+0x36/0x110 [ 1011.261407] v9fs_session_init+0x1dd/0x1670 [ 1011.261748] ? lock_release+0x3b2/0x750 [ 1011.262062] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1011.262458] ? lock_downgrade+0x6d0/0x6d0 [ 1011.262779] ? v9fs_show_options+0x690/0x690 [ 1011.263125] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1011.263514] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1011.263923] ? lock_is_held_type+0xd7/0x130 [ 1011.264269] v9fs_mount+0xb9/0xbd0 [ 1011.264549] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1011.264928] ? v9fs_statfs+0x4d0/0x4d0 [ 1011.265235] ? cap_capable+0x1eb/0x250 [ 1011.265548] ? v9fs_statfs+0x4d0/0x4d0 [ 1011.265857] legacy_get_tree+0x105/0x220 [ 1011.266180] vfs_get_tree+0x8e/0x300 [ 1011.266483] path_mount+0x1310/0x1e20 [ 1011.266788] ? kasan_quarantine_put+0x8b/0x1f0 [ 1011.267161] ? finish_automount+0x8d0/0x8d0 [ 1011.267500] ? putname+0xfe/0x140 [ 1011.267784] __x64_sys_mount+0x282/0x300 [ 1011.268103] ? path_mount+0x1e20/0x1e20 [ 1011.268427] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1011.268839] do_syscall_64+0x3b/0x90 [ 1011.269127] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1011.269519] RIP: 0033:0x7f46087a4b19 [ 1011.269804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1011.271140] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1011.271707] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1011.272248] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1011.272789] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1011.273314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1011.273842] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1011.274393] 15:23:31 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = dup2(r0, r1) accept$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400a0}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff7, 0x39}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "c4ed4ac67415cb1363be3dc4e80a7bd4"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e308492a2650bbabb36ddf369b22ee1f"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[], 0x13) openat(r2, &(0x7f0000000040)='./file0\x00', 0x8000, 0x80) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x80045440, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000080)) 15:23:31 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:23:31 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x57f, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:23:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 55) [ 1011.461748] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1012.078087] audit: type=1326 audit(1661959412.255:78): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6687 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:23:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 56) 15:23:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x500) 15:23:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:23:47 executing program 5: r0 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84336408420132af", @ANYRES16=0x0, @ANYBLOB="00052cbd7000ffdbdf255d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000003d0000000800a500000000007c00a6800a00060008021100000000000a00060008021100000100000a000600ffffffffffff00000a00060008021100000100000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000a00060008021100000000000a00060008021100000100000a00060008021100000000001c00a6800a00060008021100000100000a000600ffffffffffff00006400a6800a00060008021100000000000a00060008021100000100000a000600ffffffffffff00000a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff00000800a500010000000800a500000000004000a6800a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a00060008021100000000000800a50000000000"], 0x184}, 0x1, 0x0, 0x0, 0x4001}, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000000)=0x157b, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x8a03, 0x0) fsetxattr(r2, &(0x7f00000004c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000500)='veth1_to_batadv\x00', 0x10, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x80045440, 0x0) write(r3, &(0x7f0000000780)="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", 0x1000) r4 = openat$incfs(r0, &(0x7f0000000340)='.pending_reads\x00', 0x101000, 0x6a) r5 = open(&(0x7f0000000540)='./file1\x00', 0x40100, 0x100) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000580)) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000140)={0xae2e, 0xfffffff9, 0x3e30, 0xfffffff9, 0x10, "c9e613f33951b72e56f033cb453d8a79c2c41c"}) sendto(r4, &(0x7f0000000380)="f77ce0acdba3003d724c0fb492ab5de897f045ebfc916cab9e3eae887f6de494a36cd3c9208b25159f79eff3d6ab3043718ef3ed21a22f416293fcae56019b68b8f202fef59730ec8553d606fe8d5729ea9dc73b8839e6c61410e0cd41e0cea3647f763725937f868e995c1dd75c6ddfbd", 0x71, 0x8002, &(0x7f0000000400)=@pppoe={0x18, 0x0, {0x2, @local, 'veth1_to_batadv\x00'}}, 0x80) 15:23:47 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x600, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:23:47 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, 0x0}}], 0x1, 0x4008080) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xebc9, 0xc4, @local, 0x1c00}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 15:23:47 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 39) 15:23:47 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) [ 1027.451789] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1027.481218] audit: type=1326 audit(1661959427.658:79): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6723 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:23:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10001, 0x1}}}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0xc082}, 0x240000c0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x97395bec2f07e85f) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[], 0x13) r4 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xb) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000340)) 15:23:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 57) 15:23:47 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x700, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:23:47 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x4a1a, 0x2, 0x5, 0xfffffffb, 0x3]}, &(0x7f0000000000)=0x54) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:23:47 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 40) [ 1027.609031] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:23:47 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x900, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:23:47 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) 15:23:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 58) [ 1027.710866] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1027.759249] kobject_add_internal failed for 9p-fcall-cache (error: -12 parent: slab) [ 1027.760153] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1027.760729] CPU: 0 PID: 6762 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1027.761308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1027.762169] Call Trace: [ 1027.762365] [ 1027.762545] dump_stack_lvl+0x8b/0xb3 [ 1027.762858] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1027.763289] p9_client_create+0xc85/0x1050 [ 1027.763631] ? p9_client_rpc+0xad0/0xad0 [ 1027.763947] ? lock_is_held_type+0xd7/0x130 [ 1027.764291] ? lockdep_init_map_type+0x21a/0x7e0 [ 1027.764683] ? __raw_spin_lock_init+0x36/0x110 [ 1027.765058] v9fs_session_init+0x1dd/0x1670 [ 1027.765399] ? lock_release+0x3b2/0x750 [ 1027.765708] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1027.766059] ? lock_downgrade+0x6d0/0x6d0 [ 1027.766394] ? v9fs_show_options+0x690/0x690 [ 1027.766746] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1027.767147] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1027.767537] ? lock_is_held_type+0xd7/0x130 [ 1027.767882] v9fs_mount+0xb9/0xbd0 [ 1027.768168] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1027.768552] ? v9fs_statfs+0x4d0/0x4d0 [ 1027.768863] ? cap_capable+0x1eb/0x250 [ 1027.769179] ? v9fs_statfs+0x4d0/0x4d0 [ 1027.769479] legacy_get_tree+0x105/0x220 [ 1027.769776] vfs_get_tree+0x8e/0x300 [ 1027.770077] path_mount+0x1310/0x1e20 [ 1027.770385] ? kasan_quarantine_put+0x8b/0x1f0 [ 1027.770753] ? finish_automount+0x8d0/0x8d0 [ 1027.771094] ? putname+0xfe/0x140 [ 1027.771381] __x64_sys_mount+0x282/0x300 [ 1027.771706] ? path_mount+0x1e20/0x1e20 [ 1027.772023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1027.772425] do_syscall_64+0x3b/0x90 [ 1027.772726] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1027.773084] RIP: 0033:0x7f46087a4b19 [ 1027.773348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1027.774702] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1027.775274] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1027.775814] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1027.776353] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1027.776893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1027.777423] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1027.777973] [ 1028.280172] audit: type=1326 audit(1661959428.458:80): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6723 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:24:01 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xa00, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:24:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 41) 15:24:01 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x1800) 15:24:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:24:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 59) 15:24:01 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000514612224da2936be1ffffff9b657b3ad98d148703e780eb36dc464f07443af152d90cecbfab76c16ffb42f64624067c04db6213623c097cd547be97cab74f9a37924ec2ab39f90fed68e61d4c5fc1dadfff7df520c7087391a18a5460f37e10539c90a77d07d57b7f3fe22b6e2c3c77bd", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ff030000000000002e2f66696c653000"]) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @multicast}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 15:24:01 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000065ffff06000000080039503237ed57f429e6ede9fe6d1f3030302e75"], 0x15) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x80045440, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) dup3(r3, r3, 0x0) poll(&(0x7f0000000140)=[{r1, 0x8404}, {r0, 0x20}, {r1, 0x8000}], 0x3, 0x8) write$P9_RXATTRWALK(r3, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x2}, 0xf) write$P9_RXATTRWALK(r3, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0x4}, 0xfffffffffffffd72) 15:24:01 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) 15:24:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 42) [ 1041.698203] audit: type=1326 audit(1661959441.876:81): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6781 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 [ 1041.715102] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:24:01 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380), 0x0, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x80045440, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x3}, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) 15:24:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 60) 15:24:02 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xec0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:24:02 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 43) 15:24:02 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r3 = openat$cgroup_devices(r1, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) pwritev(r3, &(0x7f00000008c0)=[{&(0x7f0000000180)="2f569b7f3556e2b261dfc29f2a06b08e30f100ca45fb8f7d76b6a100b74930722f26eec19a2a50b851327d7e4500d1f47f2f61fa9ada90dc7265484377566457d71b0b692ed2f6a0e1a3224b0081262add248c927d6d2ccc8de7afad8b767154f8ca058d0e56be5f83494fbe34118c9a45d46d460d6285fd91c83f4808a2f14f9a7e8817edbeb5ae4a3df92b5e5bfdf9eef66e23fff92c8dbe530a116e718ebc00123823a130dc94acb04b927f16fe4a08ab61f4d8b4a297c4cb74f5649b56d42a9853e793fbc6ae2159", 0xca}, {&(0x7f0000000340)="0e5d8115b195284a4c2239db009374aff4c904b2c1fc346565c5b0f45dede4c9cc6e6a8476e5f4a1167af31b191150beacad9ab17361152ec887cdbe74f4aaec49056070b58b29b68ce4b21eff629874fc8fd6a79bd56537f5b1fe906737046d78a2814955ed8773b4d08baf8a92fd881575149c59bbbf2ef130409e520f0e27d5eedb048ec582b41842c10ad0efeba8306356f8c26ce7ea894772325fdea06298f4822d0867a28631efe6cefcc7f1bca1df43b7ee70d4e875d21644", 0xbc}, {&(0x7f0000000400)="dfa9403efd8124206dee9ff43b35df8a90d4beffba70a2c1eccfb41b12f8c7df5af882dcd24c8198a6d3c20f4f792e44eb2264ce17e664b266dd9667015b62a6787ce320359d0b87b22a425eced0db9af5841f9fcc03742cc5f3f36bde867d5618d74f011a60bac57037a950950a61b4b621974653ad0c6fb510a5c90ded4cfac9eef5e319346427a917a36d424c07421312f2bbc127e24cea4b4af0372b56444b8d73307e399d5a07dbf17a204156f86e13e728394029f1d854bca06cc9a47ca9b9ec3ba6f4837597d61f59a7219a0ccc0ca01e32a00dfad996cba3a0cd701af159be9348f88db2e27907bd29d46096e9920a23a91cc901", 0xf8}, {&(0x7f0000000500)="41194b7a0df18e965e7318e80baf7852447b8d7d8a4e4300175908ea52f3638e81975d80df0cb7ff9c2446021f2e199b4202c1a55356cb4d7ba6d7d98fee653345589f37625678bca9a3852c7114ebdb273041a46a4869cc7d9ebdb5f94567d98c9bc7fb3af6f37e0e963b277326f180b2bee998ecc8a794501352835bf54ccb5601e19de0cab56ca0f2b4a1e42358a86a9581e2b09620c3207b6d1bf82370c6c5c76088c3507094076d56502d980c8526f1caa00638159125f27b6e03bfcd8be5d70e251fc4dd7d6c9e1e35cb075348d8b97d1a632857549dae070ab13d1ea4decd9bcc8656d26d11", 0xe9}, {&(0x7f0000000600)="c487bd48eaa30365e416812f662e1e5dc5a89477982561d8ce0f8c14537996a33cb69d6399ccab49032367a232b72ed817fcdfb8f0978b9ca4603d1e05a51e8a9f6b35259951874829106f0df85f902eeca9758bcea1e16108eb4b4e7a830d7a60c0de4c01412091f40435bc7398145914e7e70220614339831389a8c9fec3de23e8e45c14c17a528b0fb4f3387e38fc1442da0c92aa86c9f3e44b83669c94eb2a2fb75c1bcf2f2588022f838386566708c2b9bfaac5f7285a2d7940f8bd87f4ce2365ce9495a3fa7e", 0xc9}, {&(0x7f0000000280)="600be18315208c7864ad6f21b9de8816", 0x10}, {&(0x7f0000000700)="40de3a691d21ef38c2dc415c23d119aa8eeadcac1c55c50678e3521d3a6dd2132fb4c9e18ce62ad4dddf99488e2e38b60ab410d1ae8016f948b0728ab2ae9fcc7865a0990e97d97b5947e1f7b54e94a3887c91733ecf637027f2bd0fa348273ba46fee1c396011329869b0005b50a5b318643537d9c666c2a13a82cf0355f0ec431065b033b5a302784b9af56ff8964c0f4737aa1f654dbc2e83829a942f8b811f088d392b7daedfce88c713a1", 0xad}, {&(0x7f00000007c0)="15d1867665f372425a5f420e51177f81572a2dde1c0f5350d91fbf31c62a3e7624da8f63fdb5bb07927b00bed92709b3c87cf49de0f0eb696171c4f9f7dfb673803a36fcf1695c90ddf172c67ea69c3355a906a13e364d465bea6072d929fe0a09352a05bf1f028c198c91adfd1686ba8fb1428517b2d7a7b70f04153eb6dbed0c522490a65347b3982e4f2d50fb8588e3a3c195f89f4ab60080c603b0a5290dcf38322c7fe6a5ff9b1e245e63536cc96e8fcfd94bf84c7dd34f4a11ad525032ede28d92fa06fbddb9ee3b1d112f0e6f789f227e217dc9cca7b8bcb23531734db2eba4dd4858167bd0", 0xe9}], 0x8, 0x6, 0x5) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x6}}, './file1\x00'}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 15:24:02 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) [ 1041.932198] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:24:02 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 61) 15:24:02 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = dup3(r0, r0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x80045440, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r2, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) recvmmsg$unix(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000000)=[{&(0x7f0000000380)=""/85, 0x55}, {&(0x7f0000000400)=""/93, 0x5d}, {&(0x7f0000000480)=""/4086, 0xff6}], 0x3, &(0x7f0000003440)=ANY=[@ANYBLOB="1c009d2600000000559403780f105a010000000200000033e02e99915798d4720c998ab1c4e4b3d4fd4cb94b15529b6574b3748cf37b304988d93fae38bf46b069d2c08307d3a6ecf6297c10cb7eec21d9a0f495ee9d26dccd7819a29a9dbc0dbdcaac226464e78144667774ad8eaa6112d60cabbf11b293fa000000000000000000000047b99239f8eff68e5926159544b7bae506d2433c255894e05991952fafa7695bfa9cad27cd512ed37455db92e2d6f87c587c706d521cee14df25b302ef329722a7fb0b30adf1", @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES64], 0x38}}, {{&(0x7f0000003280)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001500)=""/158, 0x9e}, {&(0x7f00000015c0)=""/234, 0xea}], 0x2, &(0x7f0000001700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000001480)=@abs, 0x6e, &(0x7f00000029c0)=[{&(0x7f00000018c0)=""/119, 0x77}, {&(0x7f0000005940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/73, 0x49}], 0x3, &(0x7f0000002a00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000002a80)=@abs, 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002b00)=""/117, 0x75}, {&(0x7f0000002b80)=""/250, 0xfa}, {&(0x7f0000002d40)=""/139, 0x8b}, {&(0x7f0000003140)=""/233, 0xe9}, {&(0x7f0000002e40)=""/197, 0xc5}], 0x5}}], 0x4, 0x0, &(0x7f00000030c0)={0x0, 0x989680}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r8, 0x1, 0x6, @broadcast}, 0x10) write$binfmt_elf64(r5, &(0x7f00000043c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0xff, 0x1, 0xc05f, 0x2, 0x6, 0x15, 0x29c, 0x40, 0xa1, 0xfff, 0x800, 0x38, 0x2, 0x6, 0xf000, 0xdc2}, [{0x5, 0x1ff, 0x7, 0x0, 0xfffffffffffffbff, 0x87a, 0x7}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1578) pread64(r6, &(0x7f0000003240)=""/5, 0x5, 0x3ff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000003100)={@empty}, 0x14) socket$inet6(0xa, 0x4, 0x7f) 15:24:02 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) [ 1042.525074] audit: type=1326 audit(1661959442.703:82): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6781 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:24:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x1a01) 15:24:14 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) tee(r1, r1, 0xc, 0x5) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x80045440, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x0, @multicast2}}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$TIOCPKT(r2, 0x80045440, 0x0) ioctl$FICLONE(r0, 0x40049409, r2) 15:24:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:24:14 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xf00, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:24:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 62) 15:24:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 44) 15:24:14 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:24:14 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040)=0xffff9fad, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) [ 1053.918415] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1053.925874] audit: type=1326 audit(1661959454.103:83): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6835 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:24:14 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x4800, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:24:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 63) 15:24:14 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x80045440, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x80045440, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x80045440, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES64=r2, @ANYRES32=r3, @ANYRES16=r4, @ANYRESOCT=r3, @ANYRESHEX=r0], 0x13) [ 1054.078771] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:24:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 45) 15:24:14 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x4c00, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:24:14 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:24:14 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) [ 1054.248557] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:24:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 64) [ 1054.392500] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1054.393179] CPU: 1 PID: 6871 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1054.393854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1054.394785] Call Trace: [ 1054.395001] [ 1054.395196] dump_stack_lvl+0x8b/0xb3 [ 1054.395528] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1054.395980] p9_client_create+0xc85/0x1050 [ 1054.396344] ? p9_client_rpc+0xad0/0xad0 [ 1054.396685] ? lock_is_held_type+0xd7/0x130 [ 1054.397072] ? lockdep_init_map_type+0x21a/0x7e0 [ 1054.397489] ? __raw_spin_lock_init+0x36/0x110 [ 1054.397885] v9fs_session_init+0x1dd/0x1670 [ 1054.398252] ? lock_release+0x3b2/0x750 [ 1054.398589] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1054.398990] ? lock_downgrade+0x6d0/0x6d0 [ 1054.399346] ? v9fs_show_options+0x690/0x690 [ 1054.399715] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1054.400139] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1054.400566] ? lock_is_held_type+0xd7/0x130 [ 1054.400938] v9fs_mount+0xb9/0xbd0 [ 1054.401255] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1054.401661] ? v9fs_statfs+0x4d0/0x4d0 [ 1054.401989] ? cap_capable+0x1eb/0x250 [ 1054.402332] ? v9fs_statfs+0x4d0/0x4d0 [ 1054.402658] legacy_get_tree+0x105/0x220 [ 1054.403008] vfs_get_tree+0x8e/0x300 [ 1054.403329] path_mount+0x1310/0x1e20 [ 1054.403654] ? kasan_quarantine_put+0x8b/0x1f0 [ 1054.404043] ? finish_automount+0x8d0/0x8d0 [ 1054.404406] ? putname+0xfe/0x140 [ 1054.404717] __x64_sys_mount+0x282/0x300 [ 1054.405071] ? path_mount+0x1e20/0x1e20 [ 1054.405410] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1054.405842] do_syscall_64+0x3b/0x90 [ 1054.406156] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1054.406587] RIP: 0033:0x7f46087a4b19 [ 1054.406896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1054.408339] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1054.408954] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1054.409551] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1054.410132] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1054.410717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1054.411294] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1054.411893] [ 1054.738239] audit: type=1326 audit(1661959454.916:84): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6835 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:24:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 46) 15:24:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:24:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x2000) 15:24:28 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 65) 15:24:28 executing program 5: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x599802, 0x0) ioctl$TIOCPKT(r2, 0x80045440, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0xbf, 0x2, 0x9, 0x74, 0x12, "25daf1f23ce108e73fc57e70036df2e1fb6c56"}) sendfile(r0, r2, &(0x7f0000000000)=0x6, 0x800) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) 15:24:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendto$packet(r1, &(0x7f0000000100)="71f19a538586eae949d5819615a169d0c423fc9609b2daf1c17aaedfe467b6c14183f47e8f7215b9189219de4c1e7b1f5e5301858cab7a46b9bd221866d485aebae14fece6986a8f3002e3258e918aaa391900563f7153bbd71a", 0x5a, 0x4005001, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:24:28 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:24:28 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x6000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1068.221761] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:24:28 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000001300), 0x6, 0x4000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000001340)={0x2, 'wlan0\x00', {0x9}, 0x5}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmsg(r1, &(0x7f00000011c0)={&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, &(0x7f00000001c0)=""/4096, 0x1000}, 0x2001) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001200)={{{@in=@loopback, @in=@broadcast, 0x4e22, 0x800, 0x4e23, 0x74b, 0x2, 0xa0, 0x0, 0x11, r5}, {0x8, 0x0, 0x3, 0x7, 0x80, 0x40, 0x0, 0x9}, {0xff, 0x80000001, 0x100000000, 0x7}, 0x1, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x4d3, 0x2b}, 0xa, @in=@rand_addr=0x64010101, 0x3506, 0x2, 0x2, 0x64, 0xfffffff9, 0x8, 0x200000}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) [ 1068.261211] audit: type=1326 audit(1661959468.439:85): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6879 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:24:28 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x2f, 0x40, 0x9, 0x40, 0x1, @loopback, @mcast2, 0x7, 0x1, 0x6, 0x200}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') r5 = signalfd4(r0, &(0x7f0000000300)={[0x3]}, 0x8, 0x80000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r8, 0x1, 0x6, @broadcast}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x64, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) accept$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x3, 0x9ee, 0x12, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x20, 0xffffffff, 0x7}}) write$P9_RWALK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="230000006f02000200020400001ce6000000000000319ca76df3c92ab35f01af49a011"], 0x23) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x2, {0x4, 0x2, 0x3}}, 0x14) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) 15:24:28 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x6800, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:24:28 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:24:28 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) [ 1068.402350] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:24:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 47) 15:24:28 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') socket$nl_generic(0x10, 0x3, 0x10) accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x2fc}, 0x1, 0x0, 0x0, 0x8c0}, 0x800) write$P9_RXATTRWALK(r1, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0xf) io_cancel(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xb, 0xffffffffffffffff, &(0x7f0000000000)='z', 0x1, 0xe5f}, &(0x7f0000000080)) 15:24:28 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 66) [ 1068.495286] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1068.496383] CPU: 1 PID: 6914 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1068.497475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1068.498970] Call Trace: [ 1068.499337] [ 1068.499661] dump_stack_lvl+0x8b/0xb3 [ 1068.500199] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1068.500940] p9_client_create+0xc85/0x1050 [ 1068.501552] ? p9_client_rpc+0xad0/0xad0 [ 1068.502118] ? lock_is_held_type+0xd7/0x130 [ 1068.502717] ? lockdep_init_map_type+0x21a/0x7e0 [ 1068.503396] ? __raw_spin_lock_init+0x36/0x110 [ 1068.504048] v9fs_session_init+0x1dd/0x1670 [ 1068.504651] ? lock_release+0x3b2/0x750 [ 1068.505233] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1068.505924] ? lock_downgrade+0x6d0/0x6d0 [ 1068.506516] ? v9fs_show_options+0x690/0x690 [ 1068.507144] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1068.507863] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1068.508552] ? lock_is_held_type+0xd7/0x130 [ 1068.509183] v9fs_mount+0xb9/0xbd0 [ 1068.509714] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1068.510372] ? v9fs_statfs+0x4d0/0x4d0 [ 1068.510925] ? cap_capable+0x1eb/0x250 [ 1068.511478] ? v9fs_statfs+0x4d0/0x4d0 [ 1068.512026] legacy_get_tree+0x105/0x220 [ 1068.512611] vfs_get_tree+0x8e/0x300 [ 1068.513141] path_mount+0x1310/0x1e20 [ 1068.513706] ? kasan_quarantine_put+0x8b/0x1f0 [ 1068.514356] ? finish_automount+0x8d0/0x8d0 [ 1068.514978] ? putname+0xfe/0x140 [ 1068.515495] __x64_sys_mount+0x282/0x300 [ 1068.516080] ? path_mount+0x1e20/0x1e20 [ 1068.516655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1068.517396] do_syscall_64+0x3b/0x90 [ 1068.517928] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1068.518644] RIP: 0033:0x7f46087a4b19 [ 1068.519170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1068.521648] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1068.522649] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1068.523594] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1068.524531] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1068.525488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1068.526413] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1068.527327] [ 1069.077397] audit: type=1326 audit(1661959469.255:86): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6879 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:24:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xd300) 15:24:43 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r3 = socket$inet(0x2, 0xa, 0xc21b493) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/229, 0xe5}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/218, 0xda}], 0x3, 0x7, 0x101) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:24:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:24:43 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x6c00, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:24:43 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:24:43 executing program 5: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x184, r0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc, 0x90, 0x7fffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x200}, {0xc, 0x90, 0xfffffffffffffffe}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x80000001}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xffff}, {0xc, 0x90, 0x4}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8011}, 0x804) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) 15:24:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 48) 15:24:43 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 67) [ 1083.402531] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1083.408635] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 1083.419317] audit: type=1326 audit(1661959483.597:87): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6923 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:24:43 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x7400, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1083.486837] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:24:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 49) 15:24:43 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r0, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0, 0x0, 0x0, 0x4f}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:24:43 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x7a00, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:24:43 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 68) 15:24:43 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) [ 1083.604182] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1083.645516] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1083.646117] CPU: 0 PID: 6957 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1083.646740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1083.647599] Call Trace: [ 1083.647797] [ 1083.647975] dump_stack_lvl+0x8b/0xb3 [ 1083.648281] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1083.648705] p9_client_create+0xc85/0x1050 [ 1083.649043] ? p9_client_rpc+0xad0/0xad0 [ 1083.649368] ? lock_is_held_type+0xd7/0x130 [ 1083.649721] ? lockdep_init_map_type+0x21a/0x7e0 [ 1083.650097] ? __raw_spin_lock_init+0x36/0x110 [ 1083.650464] v9fs_session_init+0x1dd/0x1670 [ 1083.650805] ? lock_release+0x3b2/0x750 [ 1083.651115] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1083.651487] ? lock_downgrade+0x6d0/0x6d0 [ 1083.651817] ? v9fs_show_options+0x690/0x690 [ 1083.652160] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1083.652549] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1083.652936] ? lock_is_held_type+0xd7/0x130 [ 1083.653284] v9fs_mount+0xb9/0xbd0 [ 1083.653572] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1083.653950] ? v9fs_statfs+0x4d0/0x4d0 [ 1083.654251] ? cap_capable+0x1eb/0x250 [ 1083.654563] ? v9fs_statfs+0x4d0/0x4d0 [ 1083.654865] legacy_get_tree+0x105/0x220 [ 1083.655190] vfs_get_tree+0x8e/0x300 [ 1083.655493] path_mount+0x1310/0x1e20 [ 1083.655799] ? kasan_quarantine_put+0x8b/0x1f0 [ 1083.656156] ? finish_automount+0x8d0/0x8d0 [ 1083.656502] ? putname+0xfe/0x140 [ 1083.656796] __x64_sys_mount+0x282/0x300 [ 1083.657121] ? path_mount+0x1e20/0x1e20 [ 1083.657446] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1083.657859] do_syscall_64+0x3b/0x90 [ 1083.658164] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1083.658563] RIP: 0033:0x7f46087a4b19 [ 1083.658848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1083.660203] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1083.660798] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1083.661345] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1083.661896] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1083.662434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1083.662973] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1083.663517] [ 1084.239124] audit: type=1326 audit(1661959484.417:88): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6923 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:24:59 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x7f05, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:24:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x80000) 15:24:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:24:59 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) [ 1099.226338] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:24:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:24:59 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[], 0x13) 15:24:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 50) 15:24:59 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 69) [ 1099.267549] audit: type=1326 audit(1661959499.444:89): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6969 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:24:59 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xc00e, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:24:59 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) write$P9_RXATTRWALK(r0, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0xffffffffffffff01}, 0xf) 15:24:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 51) 15:24:59 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x80045440, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) close_range(r0, r4, 0x0) [ 1099.363902] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:24:59 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:24:59 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 70) 15:24:59 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x880018, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0xb6d}}, {@loose}], [{@smackfsroot}, {@fowner_lt={'fowner<', r2}}, {@appraise}, {@smackfshat={'smackfshat', 0x3d, '^.)@,}(^\xe6*'}}, {@audit}, {@uid_gt={'uid>', 0xee01}}, {@seclabel}, {@measure}, {@subj_user={'subj_user', 0x3d, ']{+[$[\xb7*&):-!.'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) r3 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) ioctl$CDROMPAUSE(r4, 0x5301) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) write$P9_RREMOVE(r3, &(0x7f0000000240)={0x7, 0x7b, 0x1}, 0x7) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xc) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x0) 15:24:59 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000004380), 0x0, 0x0) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @remote}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', r3, 0x2f, 0x3, 0xac, 0x9, 0x24, @local, @private2, 0x8080, 0x8, 0x5, 0x1}}) 15:24:59 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xf000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1099.487985] device syz_tun entered promiscuous mode [ 1099.514299] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1099.514913] CPU: 0 PID: 7003 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1099.515517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1099.516375] Call Trace: [ 1099.516579] [ 1099.516761] dump_stack_lvl+0x8b/0xb3 [ 1099.517084] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1099.517503] p9_client_create+0xc85/0x1050 [ 1099.517853] ? p9_client_rpc+0xad0/0xad0 [ 1099.518177] ? lock_is_held_type+0xd7/0x130 [ 1099.518516] ? lockdep_init_map_type+0x21a/0x7e0 [ 1099.518904] ? __raw_spin_lock_init+0x36/0x110 [ 1099.519284] v9fs_session_init+0x1dd/0x1670 [ 1099.519632] ? lock_release+0x3b2/0x750 [ 1099.519955] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1099.520350] ? lock_downgrade+0x6d0/0x6d0 [ 1099.520686] ? v9fs_show_options+0x690/0x690 [ 1099.521043] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1099.521435] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1099.521845] ? lock_is_held_type+0xd7/0x130 [ 1099.522199] v9fs_mount+0xb9/0xbd0 [ 1099.522474] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1099.522861] ? v9fs_statfs+0x4d0/0x4d0 [ 1099.523170] ? cap_capable+0x1eb/0x250 [ 1099.523482] ? v9fs_statfs+0x4d0/0x4d0 [ 1099.523794] legacy_get_tree+0x105/0x220 [ 1099.524123] vfs_get_tree+0x8e/0x300 [ 1099.524431] path_mount+0x1310/0x1e20 [ 1099.524746] ? kasan_quarantine_put+0x8b/0x1f0 [ 1099.525120] ? finish_automount+0x8d0/0x8d0 [ 1099.525475] ? putname+0xfe/0x140 [ 1099.525781] __x64_sys_mount+0x282/0x300 [ 1099.526113] ? path_mount+0x1e20/0x1e20 [ 1099.526442] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1099.526857] do_syscall_64+0x3b/0x90 [ 1099.527160] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1099.527569] RIP: 0033:0x7f46087a4b19 [ 1099.527869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1099.529281] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1099.529888] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1099.530442] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1099.531003] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1099.531560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1099.532116] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1099.532699] [ 1099.536890] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1099.654992] device syz_tun left promiscuous mode [ 1099.662057] device syz_tun entered promiscuous mode [ 1099.713460] device syz_tun left promiscuous mode [ 1100.078394] audit: type=1326 audit(1661959500.256:90): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6969 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:25:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:25:16 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) 15:25:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x1000000) 15:25:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 71) 15:25:16 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x34000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:25:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 52) 15:25:16 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:25:16 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) r2 = openat2(r1, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)={0x84200, 0x22, 0x19}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) sendmmsg$inet6(r2, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0xa204) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc) sendmmsg$inet(r3, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) [ 1116.242213] audit: type=1326 audit(1661959516.420:91): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7016 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 [ 1116.286207] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:25:16 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:25:16 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:25:16 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x80045440, 0x0) pidfd_getfd(r1, r2, 0x0) 15:25:16 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x80000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1116.402544] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:25:16 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:25:16 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x400300, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:25:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 72) 15:25:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 53) [ 1116.485971] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1117.072941] audit: type=1326 audit(1661959517.250:92): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7016 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:25:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x2000000) 15:25:31 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:25:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:25:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 54) 15:25:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 73) 15:25:31 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) accept$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x6010100}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@flushsa={0xe8, 0x1c, 0x20, 0x70bd29, 0x25dfdbfd, {0x6c}, [@mark={0xc, 0x15, {0x35075c, 0x3}}, @algo_aead={0xa6, 0x12, {{'aegis256-generic\x00'}, 0x2d0, 0x180, "02f81b42013b0391770956fa58ddc5a41e7dea3bdab65b927720dcf20eb0085bf66abcb31b44ea51850a2d52e6a553b144f6d5c0cbb85741d27db15bee08514d392ef6d794b60baa2fa7114eaba2db0d9fe97da19c2ba2ad218c"}}, @policy_type={0xa}, @srcaddr={0x14, 0xd, @in=@rand_addr=0x64010102}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x24000004) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) [ 1131.343282] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -22 [ 1131.343896] CPU: 0 PID: 7061 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1131.344504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1131.345309] Call Trace: [ 1131.345515] [ 1131.345690] dump_stack_lvl+0x8b/0xb3 [ 1131.346001] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1131.346404] p9_client_create+0xc85/0x1050 [ 1131.346745] ? p9_client_rpc+0xad0/0xad0 [ 1131.347048] ? lock_is_held_type+0xd7/0x130 [ 1131.347391] ? lockdep_init_map_type+0x21a/0x7e0 [ 1131.347750] ? __raw_spin_lock_init+0x36/0x110 [ 1131.348109] v9fs_session_init+0x1dd/0x1670 [ 1131.348440] ? lock_release+0x3b2/0x750 [ 1131.348751] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1131.349110] ? lock_downgrade+0x6d0/0x6d0 [ 1131.349437] ? v9fs_show_options+0x690/0x690 [ 1131.349763] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1131.350163] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1131.350561] ? lock_is_held_type+0xd7/0x130 [ 1131.350897] v9fs_mount+0xb9/0xbd0 [ 1131.351177] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1131.351536] ? v9fs_statfs+0x4d0/0x4d0 [ 1131.351839] ? cap_capable+0x1eb/0x250 [ 1131.352139] ? v9fs_statfs+0x4d0/0x4d0 [ 1131.352439] legacy_get_tree+0x105/0x220 [ 1131.352752] vfs_get_tree+0x8e/0x300 [ 1131.353048] path_mount+0x1310/0x1e20 [ 1131.353339] ? kasan_quarantine_put+0x8b/0x1f0 [ 1131.353699] ? finish_automount+0x8d0/0x8d0 [ 1131.354044] ? putname+0xfe/0x140 [ 1131.354331] __x64_sys_mount+0x282/0x300 [ 1131.354647] ? path_mount+0x1e20/0x1e20 [ 1131.354962] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1131.355374] do_syscall_64+0x3b/0x90 [ 1131.355662] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1131.356068] RIP: 0033:0x7f4827e8ab19 [ 1131.356359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1131.357761] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1131.358337] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1131.358863] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1131.359400] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1131.359934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1131.360479] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1131.361025] [ 1131.371875] audit: type=1326 audit(1661959531.549:93): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7057 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:25:31 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1}, {r2, 0x500}, {r0, 0x3000}, {r0, 0x100}, {r3, 0x100}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100)={[0x7]}, 0x8) 15:25:31 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xe0ffff, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1131.395074] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:25:31 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xf0ffff, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:25:31 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[], 0x13) 15:25:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 74) 15:25:31 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) [ 1131.490161] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:25:31 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x1000000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:25:31 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000000)={&(0x7f0000000100)=""/252, 0xfc, 0x7ff, 0x2}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:25:31 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}, {@dfltgid}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@debug={'debug', 0x3d, 0x7f}}], [{@permit_directio}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r2 = signalfd(r0, &(0x7f0000000280)={[0x288]}, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x80045440, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) signalfd(r0, &(0x7f0000000080)={[0x3]}, 0x8) 15:25:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 55) [ 1131.578008] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1132.168029] audit: type=1326 audit(1661959532.345:94): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7057 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:25:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x4000000) 15:25:44 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x2000000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:25:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000), 0x4) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:25:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 75) 15:25:44 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', r3, 0x29, 0xb5, 0x7f, 0xd858, 0x8, @mcast2, @empty, 0x7800, 0x80, 0x1, 0x9}}) recvfrom(r4, &(0x7f0000000080)=""/10, 0xa, 0x2, &(0x7f00000001c0)=@ll={0x11, 0x17, r5, 0x1, 0x4, 0x6, @local}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 15:25:44 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0x3, 0x6, '9P2000'}, 0x13) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) 15:25:44 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:25:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 56) [ 1144.343859] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1144.357113] audit: type=1326 audit(1661959544.535:95): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7101 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:25:44 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) 15:25:44 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x3000000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:25:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 76) 15:25:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 57) [ 1144.477485] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1144.488521] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1144.489088] CPU: 1 PID: 7127 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1144.489702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1144.490540] Call Trace: [ 1144.490743] [ 1144.490920] dump_stack_lvl+0x8b/0xb3 [ 1144.491226] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1144.491651] p9_client_create+0xc85/0x1050 [ 1144.491983] ? p9_client_rpc+0xad0/0xad0 [ 1144.492310] ? lock_is_held_type+0xd7/0x130 [ 1144.492649] ? lockdep_init_map_type+0x21a/0x7e0 [ 1144.493037] ? __raw_spin_lock_init+0x36/0x110 [ 1144.493398] v9fs_session_init+0x1dd/0x1670 [ 1144.493751] ? lock_release+0x3b2/0x750 [ 1144.494061] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1144.494452] ? lock_downgrade+0x6d0/0x6d0 [ 1144.494777] ? v9fs_show_options+0x690/0x690 [ 1144.495116] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1144.495510] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1144.495905] ? lock_is_held_type+0xd7/0x130 [ 1144.496256] v9fs_mount+0xb9/0xbd0 [ 1144.496539] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1144.496918] ? v9fs_statfs+0x4d0/0x4d0 [ 1144.497221] ? cap_capable+0x1eb/0x250 [ 1144.497534] ? v9fs_statfs+0x4d0/0x4d0 [ 1144.497839] legacy_get_tree+0x105/0x220 [ 1144.498175] vfs_get_tree+0x8e/0x300 [ 1144.498471] path_mount+0x1310/0x1e20 [ 1144.498776] ? kasan_quarantine_put+0x8b/0x1f0 [ 1144.499136] ? finish_automount+0x8d0/0x8d0 [ 1144.499477] ? putname+0xfe/0x140 [ 1144.499763] __x64_sys_mount+0x282/0x300 [ 1144.500077] ? path_mount+0x1e20/0x1e20 [ 1144.500387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1144.500793] do_syscall_64+0x3b/0x90 [ 1144.501081] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1144.501475] RIP: 0033:0x7f46087a4b19 [ 1144.501764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1144.503116] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1144.503686] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1144.504231] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1144.504769] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1144.505306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1144.505840] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1144.506401] 15:25:44 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xea2}, 0x4a01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRESOCT=0x0, @ANYRESHEX=r1, @ANYBLOB="3988fd63db6d0cbb8caf98df2b2a19c0e7b35d21a1a1e70517af02831d1707000800000000006a92a93b9cd4c2689a0e1bb30d811ef075263e", @ANYRES64, @ANYRESOCT=r3, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@subj_type={'subj_type', 0x3d, '-)'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r3}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise}, {@smackfsroot}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@appraise_type}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) 15:25:44 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:25:44 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x4000000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1144.632958] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1145.168369] audit: type=1326 audit(1661959545.346:96): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7101 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:25:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x5000000) 15:25:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 58) 15:25:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000), 0x4) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:25:59 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x5000000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:25:59 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:25:59 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 77) 15:25:59 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004300)=[{{&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="e998583a07c3bd148bfcfd9537bf048f17371bcb423a475fe143cd0c67664b6ce10fc5c2ca5f71db3ee930a037bb6523e7e79ea048c7b293e4eb15be4048f652087a377c89a740a2917a9a720ca193c3188c3a54720c4d9137d66bf8d4121a7cae86805b93f6f78b2eb950cf7a746a6bebc5cca73e78e7888487e63b3d612b64d1d5206eddcf278ec3430cbff17a1dbaabe4f4111c0d5130e959c0f874e29c778b2a95b9d9dc9198d3d8373b466b2b3ff79d55ff8bbf68459b1093fcb8909dc4f2062ce9eb32a67da102d29d524893fe44206ff81faedc8ab8edc0f4a0510f9b4f917a73e6008fe54c5fc38b4b5600", 0xef}, {&(0x7f0000000180)="e7aa3caf0931", 0x6}], 0x2, &(0x7f0000000200)=[@ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x13, 0xdb, [@dev={0xac, 0x14, 0x14, 0x3e}, @local, @multicast1, @empty]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x58, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0x34, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010100, @empty, @multicast1, @empty, @loopback, @rand_addr=0x64010102]}, @ssrr={0x89, 0xf, 0xa, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback]}, @ra={0x94, 0x4}, @generic={0x0, 0x9, "c09e880015e85a"}, @ra={0x94, 0x4, 0x1}]}}}], 0xb0}}, {{&(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000002740)=[{&(0x7f0000000300)="283a2ea0bc0a44c2d2746096682e2dcf98d6c929b9ab982f2b32aaf5bad432b144d7588a6f66b97d8cd942f855045e7fb5d3caf0fc4a90be77cb0de077d607e0fb59d15234a4bea378658ee050063358ca687eaac17db341365d68116ced22bf7b0688cf84a47c9ab9451f2276f04f7e389494151b5f5478368651d7dfc05ca237f57c6b17961ffc8bbaa3f0a57ba2395a3c00c16b457d9aa5f8720d13381684fe514f60f385a37ef0e195f1e673dc1c5927130953801cf2f37f6ee58c8b08df7176ec4d2947d63f76e49aad74e2d821cd9d77eeb6575725306c4a5e5473e989d07cc03356", 0xe5}, {&(0x7f0000000400)="8ad956a9310b52c5750f8be1c34774ca9efd2dba73df6c97d763fdd618c7daabdc18008d3ecd81eccdc6db76676f9d28aee733a1de5e80354ad05353d1fa4e29aac5a4b6974e984b3d7f2bca96bdf7f053f7d1160b70800c05352e5de7f3d5bf78c836f8a6437e4659e2e255d91adffb05a3c960b671751128f1f641edcd3da5bc541813", 0x84}, {&(0x7f00000004c0)="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", 0xff}, {&(0x7f00000005c0)="f21bafec86fd68d76649d2e8281244162456a6d8e1c129c9c04f12afaa8b5efc25ba29b27e121366f1433c207c15bb4033f26ebc3a4e0a3d1c09cf9c2b2b2ff6eaaa7b1f777e192d4b4963a45041ac3cbba960abca4e3389ef22f2d4d2df1e57b0fd28bfbd9042ee9acaa3f18a66b5b361c338be1c2f03d6d967f77ac9d1063dc42a108a41489f164bd3c4eab02dbe007781bc04d762319f9e94ff60f911fa80fa0d792f1db5277297b1929fe0142ec78611431628c00c90ef2e709ee20552c855d16eb9bba704e14dcd1130830866227ba9b9e78c4d130340c569b7cb09019a97bdcb735549b6", 0xe7}, {&(0x7f00000006c0)="78468357108245e8064c3700c2d51f5c896cd996f76d5cfdea0dfd468b9aa307199010188bde3b45eca93ab0a82e7c1de121817450c342efed63d0d115209bd75a8230b791942b83a11d873d8adb9ceae9809ec36e9e2289cc899c3553ae077cbf41", 0x62}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="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", 0x1000}], 0x7, &(0x7f00000027c0)=ANY=[@ANYBLOB="110000000000000000000000010000000600000000000000000800000000000000efff0000000000", @ANYRES32=r4, @ANYBLOB="e00000020a010101000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000002ac1e000100000000140000000000000000000000070000000100000000000000140000000000000000000000020000001701000000000000140000000000000000000000020000000400000000000000"], 0xa0}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002880)="d390d41e4a300f70687a764a3a7df25cb2becb18846ea6e0ccb62d34db973a82ded93bcc21b39f8602f1a04337e677023c6e278c508cf7697cd8e3cfc940e52bd91d3bd373f31bf283b9e3d51ea18a2bcf7ce051f1680edfda5c64319101f6a3b3a37ff504f62a50f62dc6e3bdcdf9b92561d0cd766e33031f06b55bafb46ff3dd92ed983e2528c2242495b729fd4225d1a16f45f96cc6e8de6d5f6f484c597808ea17", 0xa3}, {&(0x7f0000002940)="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", 0xff}, {&(0x7f0000002a40)="5e35b7d4cf2697e6d7d073da87f4c16886e1ecea9acac31b3008b567640ed4d1d6cab849ece088a43038b78bd37994608863d79ca62f3b1bb013d3b8a689bb7c2efc75d0ee146c35bccef621f18a733428f3645b9a5004c114a55e94b2000a575bfdb27e8bc056968bacfe1ca51035c9505529ab2458d3166b4d955d8e340400e46bbd0feb9048a41c57fe4e510639e513cd0e068caf08b1504d8eb916425a0a939a", 0xa2}, {&(0x7f0000002b00)="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", 0xfb}, {&(0x7f0000002c00)="5901d0f8628b4d745398d2fb6901dc5978eb6c27055226a58590a3f57a91473425d6e1ef55bfbfb6b520dcca30aa0777b348a8cddc88faf9f9ee461c4b8f942b72459cade90a41484fe8abe1", 0x4c}], 0x5}}, {{&(0x7f0000002d00)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000003f00)=[{&(0x7f0000002d40)="1e890912f878d25dbafef8071cb56b3b8a491b62d25c90e19be27c227f620c8d234a81d3fb87b967d1549487dfd1cb611684ba5bccf31a787d811c8cc696021fe1c557ffa75d1dfc06dc6974", 0x4c}, {&(0x7f0000002dc0)="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", 0x1000}, {&(0x7f0000003dc0)="d5a6d7de4bab6846719faaa1f8bd1d0241aee43db5b5eba79148957c84af85ac9baa1e91c2c354eb44cd1d242b13c6cac953b1f23b5ec3469a02a82999064993733f9814e442a57eae923534430bccec47a63558b9bec835dfff68d82e515555fc500d51c5c5a4b5060fe4bd52616aec878c210ea35b6f311811e32a6b0e53efd89e49496593801a2db061e5c2b0dea51bdf1964a255bb2244890ef7df54a46fb16f8ea551db5d754e1d98", 0xab}, {&(0x7f0000003e80)="061fd8dac512bc3d19f732028a2e7cfa3986e66743e32587605ab1ba8e90c6d2286b7db90eb7edfec2a56fabf6fa2f7060a8d353837c8d6fb065ef4692e6e61bce55a9444d15f231a0c3068ce4", 0x4d}], 0x4}}, {{&(0x7f0000003f40)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000004280)=[{&(0x7f0000003f80)="28ee13f9a1c4bfdaedf879cd5b7bc4158e61f8fd815cb81a26de69d35231289a634bc96014cc616b5c972d4e9e4f6b7d9a656ee265a94f10ac6d4ebbcef7109d55ab3f3364c728a0c886bc509e5023175e8ba61be2c1b4ae383f56ae83c0cb7bc09e2aa7c86c0c19f28ccc6e2fb20b2226e76a79ac6390e88f4dcce9af6588de0d7832ecefe62d5257ca04f350046b83c4f1d6578af8628a176185b9283669abbe660718a83902fad403d42087c1b8ba2a811a550878a94cb8e2f26f55aafd91579e8b812241a8", 0xc7}, {&(0x7f0000004080)="a8693a23702fc5de8902e5431eeabaae8764ee51495d912a15f93d3c1627257cd492fb7926e95cec81eae75a2cd033e3f6f49d08ee", 0x35}, {&(0x7f00000040c0)="84f56577ed864bd6ab40505dde686ab6469c43e84de172c5613e33c4408f4cbde2605cbcddbad8aad6621022907a6747e41b11b0cecddfd7623ce94d2b3194332b9be4819923605742f493ac42bb059c1ddedd05c0e5becbc86a35db06d802061cefb05e4563", 0x66}, {&(0x7f0000004140)="00cd15838fd0abe3f7c4ed971fdfbc56201f22ed69e66c816d22d5fd973122c00c82c349cb838c27c521232a381f4412ab28a8bd2a4cfad1d6bf6326b3e06c5ed6c77afc2f50746d17fd668c6364c18a60429565132a5b992c3832e3b7a0a8ba91b99e0f901272cb3ce2070458a38c5188829ec6c6ebe8231210dc22728f2a60f7f294a225ba06793391724c632d4555af570d356302541f837415d62609b9c95e37802d755caf183e84f53dbfafb753654e074add2b1026f1923e17be421b99b4c1af51af3fb1ac28f343a3f8892e541baf2614c21b2a4e7100", 0xda}, {&(0x7f0000004240)="f907a4d0c5d4b9ce34631a21896b", 0xe}], 0x5}}], 0x5, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:25:59 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32=r2, @ANYRES32=r5, @ANYRESHEX=r4, @ANYRES64, @ANYRESOCT, @ANYRES64=r3, @ANYRES32, @ANYRESOCT]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl}, {@posixacl}], [{@obj_role={'obj_role', 0x3d, ']\xc5'}}, {@dont_appraise}, {@euid_lt={'euid<', r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '[-{}'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) [ 1159.733675] kobject_add_internal failed for 9p-fcall-cache (error: -12 parent: slab) [ 1159.735092] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1159.736300] CPU: 1 PID: 7148 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1159.737602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1159.739396] Call Trace: [ 1159.739815] [ 1159.740187] dump_stack_lvl+0x8b/0xb3 [ 1159.740842] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1159.741726] p9_client_create+0xc85/0x1050 [ 1159.742434] ? p9_client_rpc+0xad0/0xad0 [ 1159.743108] ? lock_is_held_type+0xd7/0x130 [ 1159.743785] ? lockdep_init_map_type+0x21a/0x7e0 [ 1159.744533] ? __raw_spin_lock_init+0x36/0x110 [ 1159.745280] v9fs_session_init+0x1dd/0x1670 [ 1159.745980] ? lock_release+0x3b2/0x750 [ 1159.746617] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1159.747386] ? lock_downgrade+0x6d0/0x6d0 [ 1159.748060] ? v9fs_show_options+0x690/0x690 [ 1159.748761] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1159.749571] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1159.750386] ? lock_is_held_type+0xd7/0x130 [ 1159.751087] v9fs_mount+0xb9/0xbd0 [ 1159.751643] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1159.752407] ? v9fs_statfs+0x4d0/0x4d0 [ 1159.753016] ? cap_capable+0x1eb/0x250 [ 1159.753614] ? v9fs_statfs+0x4d0/0x4d0 [ 1159.754229] legacy_get_tree+0x105/0x220 [ 1159.754882] vfs_get_tree+0x8e/0x300 [ 1159.755485] path_mount+0x1310/0x1e20 [ 1159.756100] ? kasan_quarantine_put+0x8b/0x1f0 [ 1159.756826] ? finish_automount+0x8d0/0x8d0 [ 1159.757518] ? putname+0xfe/0x140 [ 1159.758092] __x64_sys_mount+0x282/0x300 [ 1159.758754] ? path_mount+0x1e20/0x1e20 [ 1159.759405] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1159.760182] do_syscall_64+0x3b/0x90 [ 1159.760773] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1159.761545] RIP: 0033:0x7f4827e8ab19 [ 1159.762126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1159.764737] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1159.765835] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1159.766933] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1159.768022] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1159.769130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1159.770239] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1159.771379] [ 1159.779317] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1159.782339] audit: type=1326 audit(1661959559.959:97): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7147 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:26:00 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r3 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') r5 = accept$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000004c0)={0x2, 0x0, &(0x7f0000000480)=[r5]}, 0x1) sendmmsg(r3, &(0x7f0000002ec0)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @private=0xa010100}, 0x3, 0x3, 0x3, 0x3}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000000000)="6ea352d21c2bb29d96f0df878477ff5bea6f76cbd1c412dba818095bd0471b58d861e156ddd9cd2ce48a863690753b7853f188073b82a678450fb6cf10b1", 0x3e}, {&(0x7f0000000080)="abf53bcd2ef28c0a48060f2e718d931ac85ae70ce3b7a9674fbddae6b23e4a307ab316ab1204b09d60bef6b98cb62a150a06f136d3ddbcf598356a77", 0x3c}, {&(0x7f0000000180)="2cb82c812b490b294d7131d15c2b57e00af020631e8ff8d3eb867ada8d2333c331b3f662922ef9a86ea905ae98e9238969956ffaf62de1c2176c32722728f854c83fde4b84f11bf3fc5122402b7329bac7b211bd9c426949345fe360d51c134d68e8604869237f640088c7c9a84b2c532ca86ff88568418392f5bdbf279b3cf1c4906182d68d48743c3e631720c61ece7d4904ab461fcabcd39e5776a9d07d375baab0e7ef4b0d09b1de5a7e8ee198fcf906b1d1d550a3188eff485329fb779b2a40", 0xc2}, {&(0x7f0000000280)="be09159d262404017340e4d5f8d48fa5190133a762b43f4f8eba35d9328ced8a5042dc4bbcd5f62f86b0675ac8cbdccdfb51194be6f3731ffba768349948a4ba0aff4c568e5fbe7e9b", 0x49}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="c3d1b314195f333aa70f3e9c7edabb295b9534e84e760960135c48dcf1aada2d8531a6d4952d4d198e13f901111f0578d5310547a983aebb3afd81cecebf74b323dbb11603d49119a75848a3eb7b47a06de417b4d1d5ea81047051142cf2b62ce57e134bec255b0bcac6ea45d169087c075ef420b33fdb56b6eb7c7abe2f7b7111b68302a25d2ae7f5193bb860c92cc2d196abb28c6ee0667bb73979a36eb720d5f0a291cd0e4f69acddcffaa3ffc4c0f610ad", 0xb3}, {&(0x7f00000023c0)="73b4d4f26f9a722e7e48307e2d6c0d30b4f837abf71eff4042e7fade8a0ac2d2ebebb04d4baaf393bf09ecd1354269507ab41c6cf713ac0dbb1b6d42042f07c374531e6cb82544179bc8c0a4c34cbaf5b4c6bddb1d1a44b4", 0x58}], 0x8, &(0x7f00000024c0)=[{0x30, 0x1, 0x401, "cbab12f7b76625f761f658b0df197828420906a57b666f7e0348"}, {0xa8, 0x11, 0xaea16fa, "4ae33f7d3089eb174060077afbf744004f7ac8250abd3302788413454c57231641c627c9b2f3814053439d2dc888c50a2a4e7cdceeb8d707882ba41b7163553898bbc7a27c52209913567de1b008c64a1b06eb137f2d65231fb4311c2382274de52a5061933b458abd91164704b1942308a87484ba0d894d9b538b7c6f8c2d6bf7dcfdb8bcabbb06f48b706f52181ef5adabb34e66d2cd4c"}], 0xd8}}, {{&(0x7f00000025c0)=@x25, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002640)="6269699eaaec9f03daa3e3d45ee7d10498e48efca08c40f80725c01c9cb475424041a0e6a5dede93767a9a6d54e26c293580b8d85aa1265f8728b0a5ea32719e92a3dc9c41fbc286c3145696ed739d872a13f7c5883200fcfecb4e8f60ae58abdc55b481934f56cbb84926206815a4357fa4c63d3daee8f4", 0x78}, {&(0x7f00000026c0)="2e32ec0f8e174600c5e68f98ad6d62bb55b7367289a218748c210771fa17335b16a1541d244f8dfcf431ad388e734e9e201f90361a8a9662f1064475c46c80b641216da363aad78ec7cdd207366902f10d042bbd363e7d5349682a08d0dd026c60bc5feaf2ed46eec28991ab8f743ebc4ae2e4567356bce7381cccbc788e13cc7dff130fe863131893959ee284e6b093958552407af105d820bf7fdd4294a8b1323d0bc4a1ff3ce452bc969ced2ed57e33d070a7e5dcb2701f2ed55c0b0084aa4e658b8d634835c0fabf557fb06a4afb9b919b80bd4885369c", 0xd9}, {&(0x7f00000027c0)="f7c92d64d14a0ae0959ad621b3e1f574042b058fc3e37e1a11d1206d504a53f41918723fdae625f0c14fc459aaa108c088e42b53904fe03ec8c1006061dfb23aaba425c8e04d192ccb398232edb4631078a09399cb94a59cbd201616bc02e74c24383a4602b869737698ba1f4d0846a57c3f6778fb4171e86b89b494c2c946571b7bb65a142346f1e500f170d48abc6ea6fea58b326ae7ad66cfdcffc6ca12bc50aae6a211827b9f1e16d30f08d23023395a3e1b93c81b1afafce3417db6b45314a00a33bae26a7d91dc8541", 0xcc}, {&(0x7f00000028c0)="11f389995a465646b33925b9496e9f57e927699d61ac9fc84ca49d995d2b252361cd7b539dc943133640b2af088d46978aa3d51e69d124d213e227b224e1894630a79aac02c3b81c0e797a28d2c14021ee7c2aec212b7759c15b537207122e28e76a93b2e093bd534f2641089cb44bc86848b094d03ec3c07fd06b9d", 0x7c}, {&(0x7f0000002940)="a138febffbbbb554eba056de3147ba1fb55f0e44ee23f979ed507913d497aa0c58b2046e5e5bae185c9ff21a5ef75dfcf13a1a9d1896abe75100ffb2897a7b5161f3c57d370b124b96cf94fe747d91dbfbb685d959bc2c86880cfdf4", 0x5c}, {&(0x7f00000029c0)="7303a1309e4906c1a2b99629b479c4154c48f58fba10803d016c7ec5d28baa0f50beeabc17921738e5a0a1bb0e2fcfa9", 0x30}, {&(0x7f0000002a00)="eff5f6f917a54038a080147cd3ff4be75e6625e84490f63ca36185d27af8e19befe048d09ddc52fb9a54cb439d2c291c715368b3ef24654d05e8ffd3e3606688c5504cde40ce7dbd0db65e7b8f", 0x4d}], 0x7, &(0x7f0000002b00)=[{0xd8, 0x0, 0xfffffffe, "9136e78a34e7ef3e00451f4ab6975c02025c0acb79d292ab3062da447ec856a23a43ce2999012c24cc06c035803b2dffe529b094b98b13d3b2067894fe21998024e2fe0072ca77ad3942d3091eeeb674099966bd791f46f1a9e58b2619c1ff12ea592d8c0c98ea4618592b77610916306132f4ec745619722450d223462c140a88d218bf28d96ae44bbe2a152f2ee3d4c7cd5cf1c534f6320cc1afe9d70879664d7355a8d9667271a63b7ed785a1ad7e045965b65a4b95812964ff53a7077d7fda46e5"}, {0x28, 0x109, 0x2, "5276708ea5aa1b1bf52efcdb99b8f74df87d9649fa"}, {0x40, 0x105, 0x200, "8a291c7e607259125eaa92358681b6e3c700cc1be7410478bab355c0bae9c3dc376aeeb6594858af3b"}], 0x140}}, {{&(0x7f0000002c40)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002cc0)="fb7d5435ed27a57a7a83c389ffd034ad2ee78522ceaffa64ffc1254b9f10e47735ff296039ef5194a092520ae56a067d5741f695222f60f753285561cf0529b417306da60bf7855f9cb447fb668bcb93a6fc6d44ccce403b5eeb81e754fab8443c6c9e3d229c5901acb4942bcac39638c693641bca084a8ddb32c4be970c624d8cdef313afe88a91f3e29fd5496e579e7e83f1d14e6b84162b0fe0551c3b34a551adafec0b519bd34eb04d4a87ec3adb4bcad924565ac9cc3b86daeda0aad506ae39dc0537bc1f8327a59ab83c3c544e92bf0835fb5d045959d36433ae614f0958c23776bf2237f743d3cb66cea06a9ea2", 0xf1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002e00)="0ae4e798f53838f80b29e49754f0e0348a01bc731005c2b7a4eaa2ba82f30fa44d5ee42911c420808c6fb502dfdc6558df8f18025abc628d98279b489ed7fc1525d77add3fcd5a457d9c60414cba8b62faaf3220daa297d5e4790ab124d34e2899", 0x61}], 0x1}}], 0x4, 0x80) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:26:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 59) 15:26:00 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x6000000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:26:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 78) 15:26:00 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:26:00 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x2, 0xffffffff, 0x7fffffff, 0x6, 0x7fff, 0x5}) r1 = socket$inet6(0xa, 0x801, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@private1, 0xfffffffb, 0x1, 0x3, 0x0, 0x800, 0x3}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x800, 0x102) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r6 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0xb) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000000)={@private1, r5}, 0x14) sendmmsg$inet(r3, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0, 0x0, 0x0, 0x98}}], 0x1, 0x4008080) close_range(r1, 0xffffffffffffffff, 0x0) [ 1160.020931] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1160.032252] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1160.033528] CPU: 1 PID: 7179 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1160.034802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1160.036516] Call Trace: [ 1160.036889] [ 1160.037217] dump_stack_lvl+0x8b/0xb3 [ 1160.037779] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1160.038644] p9_client_create+0xc85/0x1050 [ 1160.039332] ? p9_client_rpc+0xad0/0xad0 [ 1160.039979] ? lock_is_held_type+0xd7/0x130 [ 1160.040675] ? lockdep_init_map_type+0x21a/0x7e0 [ 1160.041449] ? __raw_spin_lock_init+0x36/0x110 [ 1160.042198] v9fs_session_init+0x1dd/0x1670 [ 1160.042910] ? lock_release+0x3b2/0x750 [ 1160.043549] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1160.044326] ? lock_downgrade+0x6d0/0x6d0 [ 1160.044994] ? v9fs_show_options+0x690/0x690 [ 1160.045707] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1160.046530] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1160.047340] ? lock_is_held_type+0xd7/0x130 [ 1160.048047] v9fs_mount+0xb9/0xbd0 [ 1160.048613] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1160.049394] ? v9fs_statfs+0x4d0/0x4d0 [ 1160.050012] ? cap_capable+0x1eb/0x250 [ 1160.050669] ? v9fs_statfs+0x4d0/0x4d0 [ 1160.051289] legacy_get_tree+0x105/0x220 [ 1160.051953] vfs_get_tree+0x8e/0x300 [ 1160.052564] path_mount+0x1310/0x1e20 [ 1160.053193] ? kasan_quarantine_put+0x8b/0x1f0 [ 1160.053942] ? finish_automount+0x8d0/0x8d0 [ 1160.054659] ? putname+0xfe/0x140 [ 1160.055249] __x64_sys_mount+0x282/0x300 [ 1160.055911] ? path_mount+0x1e20/0x1e20 [ 1160.056567] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1160.057399] do_syscall_64+0x3b/0x90 [ 1160.057910] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1160.058695] RIP: 0033:0x7f46087a4b19 [ 1160.059283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.061971] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1160.063020] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1160.064115] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1160.065086] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1160.066125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1160.067227] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1160.068371] 15:26:00 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x7000000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1160.228795] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1160.578168] audit: type=1326 audit(1661959560.756:98): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7147 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:26:14 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0xa) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000380)=[&(0x7f0000000100)='(}.-#(\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='%{}((\xa6[,\x00', &(0x7f00000001c0)='%-\x00', &(0x7f0000000200)='/){&\x00', &(0x7f0000000240)=':\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='#!{,,^,}-*\x00', &(0x7f0000000340)='\x92./\x00'], &(0x7f0000000540)=[&(0x7f0000000400)=')\x90}}[)\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='/7)\x88\xd3\x00', &(0x7f0000000500)='\xdc/\x00'], 0x1000) acct(&(0x7f0000000040)='./file0\x00') pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) write$P9_RMKDIR(r1, &(0x7f00000005c0)={0x14, 0x49, 0x2, {0x40, 0x4, 0x1}}, 0x14) 15:26:14 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x21}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044042}, 0x4040014) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:26:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x18000000) 15:26:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 79) 15:26:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 60) 15:26:14 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:26:14 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x9000000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:26:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000), 0x4) recvfrom(r0, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) [ 1174.814874] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1174.815452] CPU: 0 PID: 7193 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1174.816057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1174.816913] Call Trace: [ 1174.817117] [ 1174.817303] dump_stack_lvl+0x8b/0xb3 [ 1174.817610] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1174.818025] p9_client_create+0xc85/0x1050 [ 1174.818366] ? p9_client_rpc+0xad0/0xad0 [ 1174.818691] ? lock_is_held_type+0xd7/0x130 [ 1174.819035] ? lockdep_init_map_type+0x21a/0x7e0 [ 1174.819428] ? __raw_spin_lock_init+0x36/0x110 [ 1174.819801] v9fs_session_init+0x1dd/0x1670 [ 1174.820147] ? lock_release+0x3b2/0x750 [ 1174.820468] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1174.820838] ? lock_downgrade+0x6d0/0x6d0 [ 1174.821174] ? v9fs_show_options+0x690/0x690 [ 1174.821513] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1174.821901] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1174.822303] ? lock_is_held_type+0xd7/0x130 [ 1174.822652] v9fs_mount+0xb9/0xbd0 [ 1174.822929] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1174.823297] ? v9fs_statfs+0x4d0/0x4d0 [ 1174.823591] ? cap_capable+0x1eb/0x250 [ 1174.823897] ? v9fs_statfs+0x4d0/0x4d0 [ 1174.824193] legacy_get_tree+0x105/0x220 [ 1174.824503] vfs_get_tree+0x8e/0x300 [ 1174.824797] path_mount+0x1310/0x1e20 [ 1174.825092] ? kasan_quarantine_put+0x8b/0x1f0 [ 1174.825457] ? finish_automount+0x8d0/0x8d0 [ 1174.825794] ? putname+0xfe/0x140 [ 1174.826073] __x64_sys_mount+0x282/0x300 [ 1174.826396] ? path_mount+0x1e20/0x1e20 [ 1174.826714] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1174.827110] do_syscall_64+0x3b/0x90 [ 1174.827392] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1174.827784] RIP: 0033:0x7f4827e8ab19 [ 1174.828065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1174.829373] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1174.829933] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1174.830466] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1174.831017] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1174.831548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.832075] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1174.832624] [ 1174.836324] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:26:15 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xa000000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1174.885049] audit: type=1326 audit(1661959575.062:99): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7200 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:26:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 61) 15:26:15 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) write$P9_RFSYNC(r2, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000100)={0x3, 0xe7, "ad681db24f6d8a455a748b43a507ec891ca850a16638621510c1bca3dfcce3735b80d9a3a6d760597c8a03df16d94e8fd1c4c2664ac71764aa8fc87ea8b4c29c8e3cd5a34beaa92972bf3d44132ff424f27cc88e7dc3ed0d7fb4c0a08c593ab56a7c47eb643f642ea0cabbdf769db1668dab4bf796a1396f0224e81047900d241d0cc08334f0cc67d806ec2d90cd10a6d9272a0c23e3286af4c87e5b211faac6ab26a0260a20ba0440df0f0a8d2c2662cac4775c98d1f2bf1047bc16bea570544a276fb7d2ad9ab7353071bf56e46421b581b2dbb43d15e9d6f543ac3b31bea281340538e6512a"}) timerfd_create(0x0, 0x0) 15:26:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 80) [ 1174.956262] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:26:15 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0xc0, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010102}, 0x10, 0x0, 0x4c}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:26:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 62) 15:26:15 executing program 5: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="f8000000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf25030000002000038005000800030000001400020073797a6b616c6c65723120000000000008000600030000004c00018008000b00736970000c0007002000000001000000060002002100000008000800600000000c0007000100000002000000070006006e710000060001000a0000000800080055c20000080005003f0000001400028005000d00010000000800030003000000540003800500080001000000060007004e200000140002000000000000000000000000000000000006000400f7000000080001000100000008000500ac1e000114000600fe880000000000000000000000000001"], 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x8000000) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) [ 1175.085107] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1175.085711] CPU: 0 PID: 7228 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1175.086325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1175.087167] Call Trace: [ 1175.087363] [ 1175.087536] dump_stack_lvl+0x8b/0xb3 [ 1175.087837] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1175.088257] p9_client_create+0xc85/0x1050 [ 1175.088583] ? p9_client_rpc+0xad0/0xad0 [ 1175.088904] ? lock_is_held_type+0xd7/0x130 [ 1175.089241] ? lockdep_init_map_type+0x21a/0x7e0 [ 1175.089616] ? __raw_spin_lock_init+0x36/0x110 [ 1175.089976] v9fs_session_init+0x1dd/0x1670 [ 1175.090308] ? lock_release+0x3b2/0x750 [ 1175.090628] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1175.091001] ? lock_downgrade+0x6d0/0x6d0 [ 1175.091313] ? v9fs_show_options+0x690/0x690 [ 1175.091647] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1175.092024] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1175.092415] ? lock_is_held_type+0xd7/0x130 [ 1175.092754] v9fs_mount+0xb9/0xbd0 [ 1175.093028] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1175.093401] ? v9fs_statfs+0x4d0/0x4d0 [ 1175.093696] ? cap_capable+0x1eb/0x250 [ 1175.094009] ? v9fs_statfs+0x4d0/0x4d0 [ 1175.094299] legacy_get_tree+0x105/0x220 [ 1175.094643] vfs_get_tree+0x8e/0x300 [ 1175.094937] path_mount+0x1310/0x1e20 [ 1175.095235] ? kasan_quarantine_put+0x8b/0x1f0 [ 1175.095594] ? finish_automount+0x8d0/0x8d0 [ 1175.095928] ? putname+0xfe/0x140 [ 1175.096204] __x64_sys_mount+0x282/0x300 [ 1175.096523] ? path_mount+0x1e20/0x1e20 [ 1175.096838] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1175.097237] do_syscall_64+0x3b/0x90 [ 1175.097529] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1175.097941] RIP: 0033:0x7f46087a4b19 [ 1175.098223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1175.099585] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1175.100156] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1175.100688] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1175.101231] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1175.101762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1175.102285] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1175.102836] 15:26:15 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xf000000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1175.152504] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1175.697037] audit: type=1326 audit(1661959575.875:100): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7200 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:26:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x1a010000) 15:26:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:26:29 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) r1 = eventfd2(0xffff, 0x80000) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x200, r0, &(0x7f0000000100)="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", 0x1000, 0x6, 0x0, 0x0, r1}, &(0x7f0000000040)) 15:26:29 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x80045440, 0x0) close_range(0xffffffffffffffff, r3, 0x0) sendfile(r2, r0, &(0x7f0000000000), 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001c00000325bd7000fedbdf25ff05ae19003c000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40804) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x30200, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 15:26:29 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:26:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 63) 15:26:29 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x48000000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:26:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 81) [ 1189.428950] audit: type=1326 audit(1661959589.607:101): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7249 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 [ 1189.452334] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:26:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:26:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 64) 15:26:29 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) [ 1189.542526] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1189.543189] CPU: 0 PID: 7259 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1189.543786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1189.544548] Call Trace: [ 1189.544749] [ 1189.544923] dump_stack_lvl+0x8b/0xb3 [ 1189.545223] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1189.545634] p9_client_create+0xc85/0x1050 [ 1189.545965] ? p9_client_rpc+0xad0/0xad0 [ 1189.546283] ? lock_is_held_type+0xd7/0x130 [ 1189.546616] ? lockdep_init_map_type+0x21a/0x7e0 [ 1189.547005] ? __raw_spin_lock_init+0x36/0x110 [ 1189.547366] v9fs_session_init+0x1dd/0x1670 [ 1189.547707] ? lock_release+0x3b2/0x750 [ 1189.548017] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1189.548397] ? lock_downgrade+0x6d0/0x6d0 [ 1189.548691] ? v9fs_show_options+0x690/0x690 [ 1189.549043] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1189.549440] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1189.549833] ? lock_is_held_type+0xd7/0x130 [ 1189.550176] v9fs_mount+0xb9/0xbd0 [ 1189.550454] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1189.550832] ? v9fs_statfs+0x4d0/0x4d0 [ 1189.551146] ? cap_capable+0x1eb/0x250 [ 1189.551456] ? v9fs_statfs+0x4d0/0x4d0 [ 1189.551759] legacy_get_tree+0x105/0x220 [ 1189.552081] vfs_get_tree+0x8e/0x300 [ 1189.552374] path_mount+0x1310/0x1e20 [ 1189.552673] ? kasan_quarantine_put+0x8b/0x1f0 [ 1189.553027] ? finish_automount+0x8d0/0x8d0 [ 1189.553366] ? putname+0xfe/0x140 [ 1189.553646] __x64_sys_mount+0x282/0x300 [ 1189.553967] ? path_mount+0x1e20/0x1e20 [ 1189.554278] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1189.554642] do_syscall_64+0x3b/0x90 [ 1189.554942] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1189.555339] RIP: 0033:0x7f4827e8ab19 [ 1189.555623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1189.556965] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1189.557537] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1189.558069] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1189.558605] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1189.559150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1189.559681] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1189.560227] 15:26:29 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x4c000000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:26:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 82) 15:26:29 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:26:29 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x80045440, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000280)) write$P9_RMKDIR(r0, &(0x7f00000002c0)={0x14, 0x49, 0x2, {0x8, 0x4}}, 0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c706f736978616331ed8e78b901a18c6c2c616e616d653d00010000000000007d2c61636c69656e742c6e6f6465766d61702c6d6d61702c667363616368652c7569643e000000000000", @ANYRESDEC=r3, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f747970653d5e2c6673636f6e746578743d756e636f6e66696e65645f752c6d6561737572652c61707072616973652c736d61636b6673666c6f6f723d1e255da726262c666f776e65723e", @ANYRESDEC, @ANYBLOB=',\x00']) 15:26:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 65) [ 1189.679972] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1189.700554] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1189.701177] CPU: 0 PID: 7276 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1189.701802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1189.702665] Call Trace: [ 1189.702967] [ 1189.703146] dump_stack_lvl+0x8b/0xb3 [ 1189.703457] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1189.703879] p9_client_create+0xc85/0x1050 [ 1189.704225] ? p9_client_rpc+0xad0/0xad0 [ 1189.704552] ? lock_is_held_type+0xd7/0x130 [ 1189.704863] ? lockdep_init_map_type+0x21a/0x7e0 [ 1189.705247] ? __raw_spin_lock_init+0x36/0x110 [ 1189.705583] v9fs_session_init+0x1dd/0x1670 [ 1189.705927] ? lock_release+0x3b2/0x750 [ 1189.706207] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1189.706591] ? lock_downgrade+0x6d0/0x6d0 [ 1189.706903] ? v9fs_show_options+0x690/0x690 [ 1189.707253] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1189.707605] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1189.708017] ? lock_is_held_type+0xd7/0x130 [ 1189.708327] v9fs_mount+0xb9/0xbd0 [ 1189.708611] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1189.708948] ? v9fs_statfs+0x4d0/0x4d0 [ 1189.709252] ? cap_capable+0x1eb/0x250 [ 1189.709535] ? v9fs_statfs+0x4d0/0x4d0 [ 1189.709843] legacy_get_tree+0x105/0x220 [ 1189.710137] vfs_get_tree+0x8e/0x300 [ 1189.710435] path_mount+0x1310/0x1e20 [ 1189.710711] ? kasan_quarantine_put+0x8b/0x1f0 [ 1189.711083] ? finish_automount+0x8d0/0x8d0 [ 1189.711393] ? putname+0xfe/0x140 [ 1189.711649] __x64_sys_mount+0x282/0x300 [ 1189.711938] ? path_mount+0x1e20/0x1e20 [ 1189.712258] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1189.712676] do_syscall_64+0x3b/0x90 [ 1189.712946] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1189.713301] RIP: 0033:0x7f46087a4b19 [ 1189.713561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1189.714770] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1189.715280] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1189.715819] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1189.716298] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1189.716778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1189.717316] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1189.717806] [ 1190.263423] audit: type=1326 audit(1661959590.441:102): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7249 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:26:42 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x60000000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:26:42 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x222000, 0x0) 15:26:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:26:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x20000000) 15:26:42 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:26:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 66) 15:26:42 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 83) 15:26:42 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) [ 1202.314809] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1202.350146] audit: type=1326 audit(1661959602.528:103): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7290 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:26:42 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x68000000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:26:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(r0, 0x0, 0x0, 0x40000000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) [ 1202.404397] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1202.405667] CPU: 0 PID: 7300 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1202.406934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1202.408671] Call Trace: [ 1202.409082] [ 1202.409451] dump_stack_lvl+0x8b/0xb3 [ 1202.410073] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1202.410927] p9_client_create+0xc85/0x1050 [ 1202.411625] ? p9_client_rpc+0xad0/0xad0 [ 1202.412268] ? lock_is_held_type+0xd7/0x130 [ 1202.412397] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1202.412931] ? lockdep_init_map_type+0x21a/0x7e0 [ 1202.414552] ? __raw_spin_lock_init+0x36/0x110 [ 1202.415310] v9fs_session_init+0x1dd/0x1670 [ 1202.416002] ? lock_release+0x3b2/0x750 [ 1202.416618] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1202.417368] ? lock_downgrade+0x6d0/0x6d0 [ 1202.418018] ? v9fs_show_options+0x690/0x690 [ 1202.418700] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1202.419483] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1202.420284] ? lock_is_held_type+0xd7/0x130 [ 1202.420968] v9fs_mount+0xb9/0xbd0 [ 1202.421519] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1202.422289] ? v9fs_statfs+0x4d0/0x4d0 [ 1202.422886] ? cap_capable+0x1eb/0x250 [ 1202.423505] ? v9fs_statfs+0x4d0/0x4d0 [ 1202.424099] legacy_get_tree+0x105/0x220 [ 1202.424738] vfs_get_tree+0x8e/0x300 [ 1202.425314] path_mount+0x1310/0x1e20 [ 1202.425893] ? kasan_quarantine_put+0x8b/0x1f0 [ 1202.426602] ? finish_automount+0x8d0/0x8d0 [ 1202.427286] ? putname+0xfe/0x140 [ 1202.427857] __x64_sys_mount+0x282/0x300 [ 1202.428486] ? path_mount+0x1e20/0x1e20 [ 1202.429112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1202.429916] do_syscall_64+0x3b/0x90 [ 1202.430500] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1202.431313] RIP: 0033:0x7f4827e8ab19 [ 1202.431882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1202.434575] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1202.435685] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1202.436707] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1202.437732] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1202.438760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1202.439791] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1202.440838] 15:26:42 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) pwritev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="e9cdfe0773cad31758399d19d43756f486b8994bdb376b20193a4d7600254dbac93543d3642552b86f05335883d98572b106b52a7580110e4cb780da2c98c3b4e7d10da48f76ef827e87cc44e334d402c9a2f4fb554ca98ab608d86d0efb72b7debbed79139b67eaaa8320837b59", 0x6e}], 0x1, 0x4, 0xfffffffd) write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[], 0x13) io_setup(0x40, &(0x7f0000000240)=0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000140)="67107431c8ff", 0x6, 0x0, 0x0, 0x1}]) dup3(r3, 0xffffffffffffffff, 0x80000) io_cancel(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000000000)="115ad9f470b7b2ec37ee6b3d1dc73119fdeeccfb99b6e423eb20c24770fcd0ae055656b070a2285695516c610a4430bf19f42992cf922b496a01028bccd6cf9349ccaf9d4c050d9671efde8f5f6a129d367fbcd7bc30c3c765f0cfb7b1cc430cd850dd8fabf5d3cc732b03ea141fe2046136", 0x72, 0x0, 0x0, 0x2}, &(0x7f0000000100)) 15:26:42 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x6c000000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:26:42 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 84) [ 1202.490969] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:26:42 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x74000000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:26:42 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) write$P9_RREMOVE(r0, &(0x7f0000000000)={0x7, 0x7b, 0x2}, 0x7) 15:26:42 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x38) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:26:42 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) [ 1202.581679] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1202.582815] CPU: 0 PID: 7317 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1202.583894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1202.585343] Call Trace: [ 1202.585699] [ 1202.586015] dump_stack_lvl+0x8b/0xb3 [ 1202.586543] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1202.586991] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1202.587268] p9_client_create+0xc85/0x1050 [ 1202.588528] ? p9_client_rpc+0xad0/0xad0 [ 1202.589078] ? lock_is_held_type+0xd7/0x130 [ 1202.589701] ? lockdep_init_map_type+0x21a/0x7e0 [ 1202.590385] ? __raw_spin_lock_init+0x36/0x110 [ 1202.591081] v9fs_session_init+0x1dd/0x1670 [ 1202.591701] ? lock_release+0x3b2/0x750 [ 1202.592271] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1202.592969] ? lock_downgrade+0x6d0/0x6d0 [ 1202.593585] ? v9fs_show_options+0x690/0x690 [ 1202.594218] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1202.594948] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1202.595673] ? lock_is_held_type+0xd7/0x130 [ 1202.596310] v9fs_mount+0xb9/0xbd0 [ 1202.596849] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1202.597541] ? v9fs_statfs+0x4d0/0x4d0 [ 1202.598103] ? cap_capable+0x1eb/0x250 [ 1202.598653] ? v9fs_statfs+0x4d0/0x4d0 [ 1202.599220] legacy_get_tree+0x105/0x220 [ 1202.599818] vfs_get_tree+0x8e/0x300 [ 1202.600360] path_mount+0x1310/0x1e20 [ 1202.600922] ? kasan_quarantine_put+0x8b/0x1f0 [ 1202.601580] ? finish_automount+0x8d0/0x8d0 [ 1202.602206] ? putname+0xfe/0x140 [ 1202.602730] __x64_sys_mount+0x282/0x300 [ 1202.603336] ? path_mount+0x1e20/0x1e20 [ 1202.603920] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1202.604659] do_syscall_64+0x3b/0x90 [ 1202.605198] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1202.605990] RIP: 0033:0x7f46087a4b19 [ 1202.606667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1202.609134] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1202.610172] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1202.611152] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1202.612135] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1202.613108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1202.614083] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1202.615109] 15:26:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 67) 15:26:42 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x7a000000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1202.670877] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1203.177271] audit: type=1326 audit(1661959603.355:104): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7290 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:26:57 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x9, 0x9, 0x0, 0x2, @multicast}, 0x80) 15:26:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xd3000000) 15:26:57 executing program 5: pipe2$9p(&(0x7f0000000000), 0x84000) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) 15:26:57 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 68) 15:26:57 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') r4 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x44000, 0x40, 0x19}, 0x73) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xb) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1ff}, 0x1c) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty, 0x4e23, 0x7, 0x4e24, 0x3, 0x0, 0xa0, 0x0, 0x89, 0x0, 0xee01}, {0x213e, 0x40, 0xe2c, 0x8, 0x1ff, 0x78}, {0x20, 0x1ff, 0x7, 0x20}, 0x6, 0x6e6bb8, 0x1, 0x1, 0x1}, {{@in6=@local, 0x4d5, 0x32}, 0xa, @in6=@mcast2, 0x0, 0x0, 0x2, 0x1, 0x1, 0x81, 0x1}}, 0xe8) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000004c0)={0x5, 0x0, &(0x7f0000000480)=[0xffffffffffffffff]}, 0x1) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x44402, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x0, 0x0, 0x12, 0x0, "7a181f08645d7c5cecbf9babc5af7761b93278b0f288e85ad2272bbe7766b0c60b9352741663d25661f8dbd97ef2c01846bbcabf25153e11fbd1e892c45218d3a51ba6e5d2fae687f9ece668c22b5247"}, 0xd8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r6, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x4e24, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10001}, 0x1c) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000003c0), &(0x7f0000000600)=0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e20}, 0x10, 0x0}}], 0x1, 0x480c0) close_range(r0, 0xffffffffffffffff, 0x2) 15:26:57 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x7f050000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:26:57 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:26:57 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 85) [ 1216.956345] audit: type=1326 audit(1661959617.134:105): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7337 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 [ 1216.974486] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1216.975044] CPU: 0 PID: 7345 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1216.975593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1216.976342] Call Trace: [ 1216.976524] [ 1216.976686] dump_stack_lvl+0x8b/0xb3 [ 1216.976966] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1216.977337] p9_client_create+0xc85/0x1050 [ 1216.977641] ? p9_client_rpc+0xad0/0xad0 [ 1216.977921] ? lock_is_held_type+0xd7/0x130 [ 1216.978227] ? lockdep_init_map_type+0x21a/0x7e0 [ 1216.978568] ? __raw_spin_lock_init+0x36/0x110 [ 1216.978893] v9fs_session_init+0x1dd/0x1670 [ 1216.979203] ? lock_release+0x3b2/0x750 [ 1216.979484] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1216.979835] ? lock_downgrade+0x6d0/0x6d0 [ 1216.980130] ? v9fs_show_options+0x690/0x690 [ 1216.980436] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1216.980789] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1216.981141] ? lock_is_held_type+0xd7/0x130 [ 1216.981450] v9fs_mount+0xb9/0xbd0 [ 1216.981700] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1216.982035] ? v9fs_statfs+0x4d0/0x4d0 [ 1216.982306] ? cap_capable+0x1eb/0x250 [ 1216.982586] ? v9fs_statfs+0x4d0/0x4d0 [ 1216.982863] legacy_get_tree+0x105/0x220 [ 1216.983165] vfs_get_tree+0x8e/0x300 [ 1216.983434] path_mount+0x1310/0x1e20 [ 1216.983708] ? kasan_quarantine_put+0x8b/0x1f0 [ 1216.984031] ? finish_automount+0x8d0/0x8d0 [ 1216.984340] ? putname+0xfe/0x140 [ 1216.984596] __x64_sys_mount+0x282/0x300 [ 1216.984883] ? path_mount+0x1e20/0x1e20 [ 1216.985166] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1216.985530] do_syscall_64+0x3b/0x90 [ 1216.985800] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1216.986158] RIP: 0033:0x7f4827e8ab19 [ 1216.986416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1216.987624] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1216.988132] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1216.988609] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1216.989081] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1216.989560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1216.990037] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1216.990524] 15:26:57 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 86) [ 1217.022407] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1217.040625] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1217.041173] CPU: 0 PID: 7356 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1217.041715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1217.042459] Call Trace: [ 1217.042641] [ 1217.042803] dump_stack_lvl+0x8b/0xb3 [ 1217.043074] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1217.043450] p9_client_create+0xc85/0x1050 [ 1217.043748] ? p9_client_rpc+0xad0/0xad0 [ 1217.044028] ? lock_is_held_type+0xd7/0x130 [ 1217.044331] ? lockdep_init_map_type+0x21a/0x7e0 [ 1217.044670] ? __raw_spin_lock_init+0x36/0x110 [ 1217.044995] v9fs_session_init+0x1dd/0x1670 [ 1217.045301] ? lock_release+0x3b2/0x750 [ 1217.045579] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1217.045919] ? lock_downgrade+0x6d0/0x6d0 [ 1217.046214] ? v9fs_show_options+0x690/0x690 [ 1217.046522] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1217.046871] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1217.047234] ? lock_is_held_type+0xd7/0x130 [ 1217.047543] v9fs_mount+0xb9/0xbd0 [ 1217.047796] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1217.048132] ? v9fs_statfs+0x4d0/0x4d0 [ 1217.048403] ? cap_capable+0x1eb/0x250 [ 1217.048686] ? v9fs_statfs+0x4d0/0x4d0 [ 1217.048959] legacy_get_tree+0x105/0x220 [ 1217.049249] vfs_get_tree+0x8e/0x300 [ 1217.049516] path_mount+0x1310/0x1e20 [ 1217.049793] ? kasan_quarantine_put+0x8b/0x1f0 [ 1217.050121] ? finish_automount+0x8d0/0x8d0 [ 1217.050429] ? putname+0xfe/0x140 [ 1217.050693] __x64_sys_mount+0x282/0x300 [ 1217.050981] ? path_mount+0x1e20/0x1e20 [ 1217.051283] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1217.051652] do_syscall_64+0x3b/0x90 [ 1217.051913] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1217.052268] RIP: 0033:0x7f46087a4b19 [ 1217.052530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1217.053728] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1217.054244] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1217.054727] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1217.055211] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1217.055685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1217.056169] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1217.056662] 15:26:57 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 69) 15:26:57 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x9effffff, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:26:57 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 87) 15:26:57 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) sendto(r1, &(0x7f0000000100)="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", 0x1000, 0x10, &(0x7f0000000000)=@hci={0x1f, 0xffffffffffffffff}, 0x80) 15:26:57 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 70) [ 1217.190895] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:26:57 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:26:57 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r4, @ANYRES32=r7, @ANYRESHEX=r6, @ANYRES64, @ANYRESOCT, @ANYRES64=r5, @ANYRES32, @ANYRESOCT]) fchownat(r3, &(0x7f00000000c0)='./file1\x00', r6, 0xee01, 0x1000) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) sendmmsg$inet(r2, &(0x7f0000004380), 0x0, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000200)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', &(0x7f00000003c0)=@reiserfs_4={0x10, 0x4, {0x0, 0x6fae, 0x6, 0x1f}}, &(0x7f0000000500), 0x1400) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000000140)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x8000}, @ethernet={0x30c, @multicast}, @isdn={0x22, 0x60, 0x70, 0x7, 0x40}, 0x6, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)='virt_wifi0\x00', 0x20, 0x9, 0x8eff}) [ 1217.299818] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1217.301308] CPU: 0 PID: 7372 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1217.302445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1217.303994] Call Trace: [ 1217.304369] [ 1217.304701] dump_stack_lvl+0x8b/0xb3 [ 1217.305258] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1217.306019] p9_client_create+0xc85/0x1050 [ 1217.306634] ? p9_client_rpc+0xad0/0xad0 [ 1217.307228] ? lock_is_held_type+0xd7/0x130 [ 1217.307858] ? lockdep_init_map_type+0x21a/0x7e0 [ 1217.308557] ? __raw_spin_lock_init+0x36/0x110 [ 1217.309227] v9fs_session_init+0x1dd/0x1670 [ 1217.309856] ? lock_release+0x3b2/0x750 [ 1217.310434] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1217.311154] ? lock_downgrade+0x6d0/0x6d0 [ 1217.311756] ? v9fs_show_options+0x690/0x690 [ 1217.312393] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1217.313114] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1217.313840] ? lock_is_held_type+0xd7/0x130 [ 1217.314471] v9fs_mount+0xb9/0xbd0 [ 1217.314983] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1217.315687] ? v9fs_statfs+0x4d0/0x4d0 [ 1217.316239] ? cap_capable+0x1eb/0x250 [ 1217.316808] ? v9fs_statfs+0x4d0/0x4d0 [ 1217.317363] legacy_get_tree+0x105/0x220 [ 1217.317956] vfs_get_tree+0x8e/0x300 [ 1217.318502] path_mount+0x1310/0x1e20 [ 1217.319060] ? kasan_quarantine_put+0x8b/0x1f0 [ 1217.319747] ? finish_automount+0x8d0/0x8d0 [ 1217.320374] ? putname+0xfe/0x140 [ 1217.320897] __x64_sys_mount+0x282/0x300 [ 1217.321488] ? path_mount+0x1e20/0x1e20 [ 1217.322066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1217.322808] do_syscall_64+0x3b/0x90 [ 1217.323357] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1217.324094] RIP: 0033:0x7f4827e8ab19 [ 1217.324621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1217.327107] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1217.328158] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1217.329142] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1217.330067] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1217.331055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1217.332070] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1217.333078] [ 1217.772629] audit: type=1326 audit(1661959617.950:106): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7337 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:27:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xf6ffffff) 15:27:12 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 15:27:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 88) 15:27:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xa6c0, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:27:12 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xc00e0000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:27:12 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000200)={0xd8f, 0x0, '\x00', 0x1, 0xfffffffffffffffc}) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x6, 0x411100) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200001, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@appraise_type}, {@seclabel}, {@obj_type}, {@obj_role={'obj_role', 0x3d, '\\(|!]'}}, {@smackfshat={'smackfshat', 0x3d, '){'}}, {@dont_appraise}, {@subj_user={'subj_user', 0x3d, '}'}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, '%'}}, {@context={'context', 0x3d, 'staff_u'}}]}}) 15:27:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 71) 15:27:12 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000000000), 0x1, 0x4008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xa) recvmmsg(r4, &(0x7f0000007e80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001480)=""/209, 0xd1}, {&(0x7f0000001580)=""/139, 0x8b}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/152, 0x98}, {&(0x7f0000002700)=""/241, 0xf1}, {&(0x7f0000002800)=""/162, 0xa2}, {&(0x7f00000028c0)=""/99, 0x63}], 0x7, &(0x7f00000029c0)=""/70, 0x46}, 0x9}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000002a40)=""/37, 0x25}, {&(0x7f0000002a80)=""/135, 0x87}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/87, 0x57}, {&(0x7f0000003bc0)=""/22, 0x16}], 0x5, &(0x7f0000003c80)=""/92, 0x5c}, 0xfffffff8}, {{&(0x7f0000003d00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000005200)=[{&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/183, 0xb7}, {&(0x7f0000004e40)=""/175, 0xaf}, {&(0x7f0000004f00)=""/199, 0xc7}, {&(0x7f0000005000)=""/121, 0x79}, {&(0x7f0000005080)=""/108, 0x6c}, {&(0x7f0000005100)=""/251, 0xfb}], 0x7, &(0x7f0000005280)=""/120, 0x78}, 0x421}, {{&(0x7f0000005300)=@nfc, 0x80, &(0x7f0000005580)=[{&(0x7f0000005380)=""/228, 0xe4}, {&(0x7f0000005480)=""/218, 0xda}], 0x2, &(0x7f00000055c0)=""/172, 0xac}, 0x71f}, {{&(0x7f0000005680)=@tipc=@id, 0x80, &(0x7f0000007b80)=[{&(0x7f0000005700)=""/107, 0x6b}, {&(0x7f0000005780)=""/195, 0xc3}, {&(0x7f0000005880)=""/4096, 0x1000}, {&(0x7f0000006880)=""/225, 0xe1}, {&(0x7f0000006980)=""/239, 0xef}, {&(0x7f0000006a80)=""/4096, 0x1000}, {&(0x7f0000007a80)=""/175, 0xaf}, {&(0x7f0000007b40)=""/30, 0x1e}], 0x8}, 0x6}, {{&(0x7f0000007c00)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000007dc0)=[{&(0x7f0000007c80)=""/73, 0x49}, {&(0x7f0000007d00)=""/152, 0x98}], 0x2, &(0x7f0000007e00)=""/96, 0x60}}], 0x6, 0x40, &(0x7f0000008000)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000280)={r3, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001280)) close_range(r0, 0xffffffffffffffff, 0x0) 15:27:12 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x7}, 0x1c) r3 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x121100, 0x50) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0x1006, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f0000000080)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) [ 1232.616319] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1232.617136] CPU: 0 PID: 7394 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1232.617754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1232.618832] Call Trace: [ 1232.619098] [ 1232.619339] dump_stack_lvl+0x8b/0xb3 [ 1232.619739] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1232.620285] p9_client_create+0xc85/0x1050 [ 1232.620725] ? p9_client_rpc+0xad0/0xad0 [ 1232.621136] ? lock_is_held_type+0xd7/0x130 [ 1232.621578] ? lockdep_init_map_type+0x21a/0x7e0 [ 1232.622069] ? __raw_spin_lock_init+0x36/0x110 [ 1232.622564] v9fs_session_init+0x1dd/0x1670 [ 1232.623004] ? lock_release+0x3b2/0x750 [ 1232.623415] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1232.623907] ? lock_downgrade+0x6d0/0x6d0 [ 1232.624332] ? v9fs_show_options+0x690/0x690 [ 1232.624773] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1232.625280] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1232.625781] ? lock_is_held_type+0xd7/0x130 [ 1232.626226] v9fs_mount+0xb9/0xbd0 [ 1232.626580] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1232.627066] ? v9fs_statfs+0x4d0/0x4d0 [ 1232.627465] ? cap_capable+0x1eb/0x250 [ 1232.627870] ? v9fs_statfs+0x4d0/0x4d0 [ 1232.628264] legacy_get_tree+0x105/0x220 [ 1232.628692] vfs_get_tree+0x8e/0x300 [ 1232.629080] path_mount+0x1310/0x1e20 [ 1232.629479] ? kasan_quarantine_put+0x8b/0x1f0 [ 1232.629945] ? finish_automount+0x8d0/0x8d0 [ 1232.630394] ? putname+0xfe/0x140 [ 1232.630758] __x64_sys_mount+0x282/0x300 [ 1232.631171] ? path_mount+0x1e20/0x1e20 [ 1232.631582] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1232.632102] do_syscall_64+0x3b/0x90 [ 1232.632480] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1232.632994] RIP: 0033:0x7f46087a4b19 [ 1232.633364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1232.635150] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1232.635896] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1232.636569] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1232.637269] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1232.637967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1232.638663] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1232.639390] [ 1232.659914] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:27:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 72) 15:27:12 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x80045440, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) write$P9_RWALK(r3, &(0x7f00000000c0)={0x16, 0x6f, 0x2, {0x1, [{0x2, 0x1, 0x3}]}}, 0x16) r4 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1010800, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@uname={'uname', 0x3d, '#-*/*\\^\x13$\xbc{'}}, {@cache_none}, {@cache_none}, {@cache_none}, {@cache_mmap}, {@cache_fscache}], [{@seclabel}, {@context={'context', 0x3d, 'user_u'}}, {@obj_type={'obj_type', 0x3d, '*%@\\'}}, {@uid_gt}, {@dont_hash}, {@dont_measure}, {@fowner_gt={'fowner>', r5}}, {@appraise_type}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xc) [ 1232.712436] audit: type=1326 audit(1661959632.890:107): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7388 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:27:12 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @mcast1, 0x8000}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) [ 1232.741161] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1232.741892] CPU: 0 PID: 7407 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1232.742672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1232.743778] Call Trace: [ 1232.744040] [ 1232.744265] dump_stack_lvl+0x8b/0xb3 [ 1232.744665] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1232.745204] p9_client_create+0xc85/0x1050 [ 1232.745639] ? p9_client_rpc+0xad0/0xad0 [ 1232.746043] ? lock_is_held_type+0xd7/0x130 [ 1232.746478] ? lockdep_init_map_type+0x21a/0x7e0 [ 1232.746958] ? __raw_spin_lock_init+0x36/0x110 [ 1232.747443] v9fs_session_init+0x1dd/0x1670 [ 1232.747880] ? lock_release+0x3b2/0x750 [ 1232.748285] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1232.748782] ? lock_downgrade+0x6d0/0x6d0 [ 1232.749198] ? v9fs_show_options+0x690/0x690 [ 1232.749646] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1232.750151] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1232.750657] ? lock_is_held_type+0xd7/0x130 [ 1232.751103] v9fs_mount+0xb9/0xbd0 [ 1232.751468] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1232.751956] ? v9fs_statfs+0x4d0/0x4d0 [ 1232.752352] ? cap_capable+0x1eb/0x250 [ 1232.752760] ? v9fs_statfs+0x4d0/0x4d0 [ 1232.753149] legacy_get_tree+0x105/0x220 [ 1232.753569] vfs_get_tree+0x8e/0x300 [ 1232.753956] path_mount+0x1310/0x1e20 [ 1232.754357] ? kasan_quarantine_put+0x8b/0x1f0 [ 1232.754816] ? finish_automount+0x8d0/0x8d0 [ 1232.755264] ? putname+0xfe/0x140 [ 1232.755627] __x64_sys_mount+0x282/0x300 [ 1232.756032] ? path_mount+0x1e20/0x1e20 [ 1232.756441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1232.756967] do_syscall_64+0x3b/0x90 [ 1232.757346] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1232.757864] RIP: 0033:0x7f4827e8ab19 [ 1232.758230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1232.759991] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1232.760730] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1232.761425] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1232.762130] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1232.762833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1232.763539] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1232.764246] 15:27:12 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xf0ffffff, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:27:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 89) 15:27:12 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) [ 1232.840190] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:27:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xfeffffff) [ 1232.910164] audit: type=1326 audit(1661959633.088:108): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7421 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 [ 1233.728304] audit: type=1326 audit(1661959633.906:109): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7421 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:27:27 executing program 5: pipe2$9p(&(0x7f0000000040), 0x84800) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[], 0x13) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r4, @ANYRES32=r7, @ANYRESHEX=r6, @ANYRES64, @ANYRESOCT, @ANYRES64=r5, @ANYRES32, @ANYRESOCT]) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4405, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_loose}, {@afid={'afid', 0x3d, 0x800}}], [{@euid_lt={'euid<', r2}}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '{!-%{\xb4n@[{'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_type={'subj_type', 0x3d, '}%&'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@smackfsroot}, {@obj_type={'obj_type', 0x3d, '\'$.-'}}, {@uid_gt={'uid>', r6}}]}}) 15:27:27 executing program 0: r0 = socket$inet6(0xa, 0x4, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:27:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xfffffff6) 15:27:27 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x7}, 0x1c) r3 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x121100, 0x50) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0x1006, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f0000000080)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:27:27 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xffffe000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:27:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 73) 15:27:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 90) 15:27:27 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) [ 1247.711389] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1247.727237] audit: type=1326 audit(1661959647.905:110): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7431 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 [ 1247.744235] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1247.745275] CPU: 1 PID: 7434 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1247.746334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1247.747878] Call Trace: [ 1247.748233] [ 1247.748557] dump_stack_lvl+0x8b/0xb3 [ 1247.749118] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1247.749879] p9_client_create+0xc85/0x1050 [ 1247.750483] ? p9_client_rpc+0xad0/0xad0 [ 1247.751050] ? lock_is_held_type+0xd7/0x130 [ 1247.751672] ? lockdep_init_map_type+0x21a/0x7e0 [ 1247.752345] ? __raw_spin_lock_init+0x36/0x110 [ 1247.753015] v9fs_session_init+0x1dd/0x1670 [ 1247.753647] ? lock_release+0x3b2/0x750 [ 1247.754221] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1247.754910] ? lock_downgrade+0x6d0/0x6d0 [ 1247.755512] ? v9fs_show_options+0x690/0x690 [ 1247.756140] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1247.756873] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1247.757596] ? lock_is_held_type+0xd7/0x130 [ 1247.758233] v9fs_mount+0xb9/0xbd0 [ 1247.758742] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1247.759439] ? v9fs_statfs+0x4d0/0x4d0 [ 1247.759988] ? cap_capable+0x1eb/0x250 [ 1247.760561] ? v9fs_statfs+0x4d0/0x4d0 [ 1247.761120] legacy_get_tree+0x105/0x220 [ 1247.761715] vfs_get_tree+0x8e/0x300 [ 1247.762274] path_mount+0x1310/0x1e20 [ 1247.762839] ? kasan_quarantine_put+0x8b/0x1f0 [ 1247.763509] ? finish_automount+0x8d0/0x8d0 [ 1247.764143] ? putname+0xfe/0x140 [ 1247.764668] __x64_sys_mount+0x282/0x300 [ 1247.765256] ? path_mount+0x1e20/0x1e20 [ 1247.765815] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1247.766564] do_syscall_64+0x3b/0x90 [ 1247.767105] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1247.767862] RIP: 0033:0x7f46087a4b19 [ 1247.768385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1247.770870] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1247.771926] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1247.772851] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1247.773792] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1247.774772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1247.775768] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1247.776772] 15:27:28 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xfffff000, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:27:28 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r4, @ANYRES32=r7, @ANYRESHEX=r6, @ANYRES64, @ANYRESOCT, @ANYRES64=r5, @ANYRES32, @ANYRESOCT]) fchownat(r3, &(0x7f00000000c0)='./file1\x00', r6, 0xee01, 0x1000) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) sendmmsg$inet(r2, &(0x7f0000004380), 0x0, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000200)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', &(0x7f00000003c0)=@reiserfs_4={0x10, 0x4, {0x0, 0x6fae, 0x6, 0x1f}}, &(0x7f0000000500), 0x1400) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000000140)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x8000}, @ethernet={0x30c, @multicast}, @isdn={0x22, 0x60, 0x70, 0x7, 0x40}, 0x6, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)='virt_wifi0\x00', 0x20, 0x9, 0x8eff}) [ 1247.901523] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:27:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 74) 15:27:28 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 91) 15:27:28 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 15:27:28 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xffffff7f, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1248.058042] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1248.126445] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1248.127541] CPU: 1 PID: 7462 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1248.128631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1248.130118] Call Trace: [ 1248.130482] [ 1248.130794] dump_stack_lvl+0x8b/0xb3 [ 1248.131336] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1248.132089] p9_client_create+0xc85/0x1050 [ 1248.132689] ? p9_client_rpc+0xad0/0xad0 [ 1248.133251] ? lock_is_held_type+0xd7/0x130 [ 1248.133870] ? lockdep_init_map_type+0x21a/0x7e0 [ 1248.134561] ? __raw_spin_lock_init+0x36/0x110 [ 1248.135230] v9fs_session_init+0x1dd/0x1670 [ 1248.135883] ? lock_release+0x3b2/0x750 [ 1248.136458] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1248.137157] ? lock_downgrade+0x6d0/0x6d0 [ 1248.137757] ? v9fs_show_options+0x690/0x690 [ 1248.138374] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1248.139103] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1248.139814] ? lock_is_held_type+0xd7/0x130 [ 1248.140462] v9fs_mount+0xb9/0xbd0 [ 1248.140963] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1248.141658] ? v9fs_statfs+0x4d0/0x4d0 [ 1248.142215] ? cap_capable+0x1eb/0x250 [ 1248.142789] ? v9fs_statfs+0x4d0/0x4d0 [ 1248.143344] legacy_get_tree+0x105/0x220 [ 1248.143959] vfs_get_tree+0x8e/0x300 [ 1248.144510] path_mount+0x1310/0x1e20 [ 1248.145068] ? kasan_quarantine_put+0x8b/0x1f0 [ 1248.145734] ? finish_automount+0x8d0/0x8d0 [ 1248.146357] ? putname+0xfe/0x140 [ 1248.146869] __x64_sys_mount+0x282/0x300 [ 1248.147462] ? path_mount+0x1e20/0x1e20 [ 1248.148060] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1248.148808] do_syscall_64+0x3b/0x90 [ 1248.149350] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1248.150083] RIP: 0033:0x7f4827e8ab19 [ 1248.150620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1248.153126] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1248.154189] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1248.155189] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1248.156204] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1248.157188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1248.158184] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1248.159195] 15:27:28 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xffffff9e, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:27:28 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') r2 = accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0x13) 15:27:28 executing program 2: pipe2$9p(&(0x7f0000000040), 0x84800) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[], 0x13) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r4, @ANYRES32=r7, @ANYRESHEX=r6, @ANYRES64, @ANYRESOCT, @ANYRES64=r5, @ANYRES32, @ANYRESOCT]) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4405, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_loose}, {@afid={'afid', 0x3d, 0x800}}], [{@euid_lt={'euid<', r2}}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '{!-%{\xb4n@[{'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_type={'subj_type', 0x3d, '}%&'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@smackfsroot}, {@obj_type={'obj_type', 0x3d, '\'$.-'}}, {@uid_gt={'uid>', r6}}]}}) [ 1248.277127] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1248.539062] audit: type=1326 audit(1661959648.717:111): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7431 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:27:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xfffffffe) 15:27:40 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 15:27:40 executing program 2: pipe2$9p(&(0x7f0000000040), 0x84800) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[], 0x13) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r4, @ANYRES32=r7, @ANYRESHEX=r6, @ANYRES64, @ANYRESOCT, @ANYRES64=r5, @ANYRES32, @ANYRESOCT]) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4405, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_loose}, {@afid={'afid', 0x3d, 0x800}}], [{@euid_lt={'euid<', r2}}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '{!-%{\xb4n@[{'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_type={'subj_type', 0x3d, '}%&'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@smackfsroot}, {@obj_type={'obj_type', 0x3d, '\'$.-'}}, {@uid_gt={'uid>', r6}}]}}) 15:27:40 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xfffffff0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:27:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 75) 15:27:40 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in=@dev, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000440)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800088, &(0x7f00000007c0)=ANY=[@ANYBLOB="66646e6f3d83ca2250000000000000b14584023cb78fd2a4e7f205edba6c5c8242db16232cc5f3bb612ab02b58d10f88ab8fcbe60f8946a2e506a363ba959061253cb176b94936635f9cc6acc0699758983286be203d9ad24923975bf28af26ca9230123141cba900e3206254f8e2ade8f9061b76ade32002ef38b38496816c3e89c4586be4ece36ab82d6446aaa06930042af9a8d6101ad1ccd80c602ad7daf8b975a78bd48a8de37be940d78236fdb9adefb5a50c8007b3a0000000028e0e818636c0477f36fbf3d6c0dace544de0f44e91a9f15f4221bd97fc3d9eba6e89a61e6caeaca0e6ec0f088f7ca4dcd56cf178142f600"/255, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=user,mmap,cache=fscache,afid=0x00000000ffffffff,mmap,uname=+\\\\,fsname=9p\x00,fowner<', @ANYRESDEC=r4, @ANYBLOB=',seclabel,obj_type=/-,\x00']) lseek(r1, 0x7, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r2, @ANYRESDEC, @ANYRESHEX=r5, @ANYRES64, @ANYRESOCT, @ANYRES16=r2, @ANYRES32, @ANYRESOCT]) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}], [{@uid_eq={'uid', 0x3d, r5}}, {@obj_user={'obj_user', 0x3d, '\x00'}}]}}) 15:27:40 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 92) 15:27:40 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'syztnl0\x00', r3, 0x4, 0x1, 0xff, 0x10001, 0x58, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7800, 0x7871, 0x81, 0x7}}) sendto$packet(r4, &(0x7f0000000380), 0x0, 0x4004000, &(0x7f00000008c0)={0x11, 0x2, r5, 0x1, 0x3f, 0x6, @random="0bc9ba3ce760"}, 0x14) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000017c0)={@loopback, 0x0}, &(0x7f0000001800)=0x14) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r8, 0x1, 0x6, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f80)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000100)="c48aca0f673fa433171830bc56f5a591860eab2dc7f2148b9734410b63a790a93daf9117350a2a73b03ed731d7ce0b7c90d57ca87aa1d7e51892f0ab782faa386d42e43c7d33f2b43610d696517c542e1ded20d9bef28b9e52d3ef8015df29385f1e0073db1cd6cbf0f3a9d305e33882534ad3711f239699f2f3c66abd70822512c4f823cf1223e156186c72dc5697d00f8ea3a4a9bd72a888fc4ac50fc99c42288f7ee29e0eb89344834042a0aeedf0287137619a6a738d788eea94ff7b7b53edfe2ae2703dd9e40351e6ec86de38884988", 0xd2}, {&(0x7f0000000200)="cca6a062f537ee2624b2cbd2fbc346fd1d254433c761d8836f81cde421a20668d1c455f9551311c80a9e27fac6cccb62ea039475cbfe967019eb6033bf9752b0e0f083e8db280a6278e5f2b2dfde1e1234f5eff3826ced6c6c2b9ac27190cd94f28f73fcc3fa43be1491b5f120a6e68a8df8c759aafb040c27fc2e576783f5d80e0f47bbb29f52afbdc29e62d185814e4c53343e5ed6c297c5832469f6d25c09d5ae3c8c0d7483c1d643ab68df0df05d84af6954878b0eea01ebc73b239927576e17f963c90fb2b21ca63dc689b36fd55ccf4a763f4d7e406c", 0xd9}, {&(0x7f0000000300)="eec65b9ace7e737368d3b9e0cf95a414fd7e9388e9d1a7bf5caea51fac5e7f4e726b871cd06e54d05a145ef3cad6a961a0adb6ee8c630f9f0a8b5af190b737edf8f9229ef875728dc6d12572cb2f121cb6a265ea5bd4e08ab1436faa837bcbffa5abde7d39c891", 0x67}, {&(0x7f0000000080)="ebfb4ec03daf684693030aba4d3ed26ee9", 0x11}, {&(0x7f00000005c0)="e945be8208f0fbde10801ffa96832527bb0c6a8e048d510f3b3bf29605f272f943a045e312d1c8f6", 0x28}, {&(0x7f0000000600)="f080fc8ef64efdc1e44a95ef4f3416f48e5f46f1d3629d85743cf6b320d891b795ba562795685dbf0a359e4ebdbbbbf7d939e12d0c9f989d01e4205477e99b3c905bab7ede6bed2b0f5ee1de390bdbe415eff518c415b4f85bdd6b3a83ab7dd6267387024b37542c4790d5828040c8bf4122337182269c134243364bc2443e855ef2ffd173aad5147d48801565e0e6590a6bd323cf78d66063d07b8bf1f4cfa76d7e825ece0c81483763a455025650945a6a8a3972ac4095b614b4cf166c9e1d658f0abd6f59f6ee33d2f3", 0xcb}, {&(0x7f0000000700)="f72ff7a2c19b5a9da3592290544787c73d283f38823c06e71dc4e7c865d67b08f07b7234dbc01b7bd578017cd06a83b1191ab49f546ae15ac53fd60881ec7fcabdb0664b9c83153fd41d9661", 0x4c}], 0x7, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdf}}], 0x30}}, {{&(0x7f0000000400)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000440)="a65b17cae41ae2808b3b15b076c95a83b5fac0b92277eb347c42275fec6ff648554e48ac0eff4d7463d7ea697f6a3969276ec0d3fa0d076634495e7b643e4b52cd52d480e48888923569c8fc4432043e953a580a1f5f175a49224e0a3960612f074ac32be76371", 0x67}], 0x1, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x44}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8c}}], 0xb0}}, {{&(0x7f0000001900)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000002ec0)}}], 0x4, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) [ 1260.498420] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1260.505391] audit: type=1326 audit(1661959660.683:112): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7479 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:27:40 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0xffffffff, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:27:40 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x80045440, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x802, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}, {@version_u}, {@version_u}, {@cache_fscache}, {@aname={'aname', 0x3d, ',\a,&{^'}}, {}], [{@measure}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x39, 0x34, 0x30, 0x33, 0x38, 0x62, 0x62], 0x2d, [0x32, 0x34, 0x55, 0x66], 0x2d, [0x32, 0x62, 0x66, 0x33], 0x2d, [0x36, 0x38, 0x34, 0x35], 0x2d, [0x31, 0x34, 0x30, 0x31, 0x39, 0x63, 0x0, 0x2]}}}]}}) r3 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x964, 0x1, 0x5, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [{{0x254, 0x1, {{0x2}, 0x40, 0x0, 0x3, 0x4, 0x3, 'syz1\x00', "d4d7ee32ecfeccaf628fa8b60b620e71feb09aa6e7f998644b2cc7d82aa0de99", "47795284be3fe842b4718251f651365c9d61630f44da7af227b046bef307eea6", [{0x8283, 0x1, {0x1, 0xff}}, {0xf0f4, 0x40, {0x0, 0x1000}}, {0x913e, 0x9, {0x1, 0x4e4b}}, {0x8, 0x2, {0x0, 0x6}}, {0xf604, 0x8, {0x2, 0x80000001}}, {0x4, 0x7, {0x1, 0x6}}, {0x0, 0x2, {0x0, 0x3f}}, {0x84, 0x100, {0x2, 0x3ff}}, {0x3, 0x2, {0x1, 0x401}}, {0x81, 0x0, {0x3, 0x9}}, {0x5, 0xfff, {0x3, 0x7}}, {0x8000, 0x40, {0x1, 0x3ff}}, {0x1, 0x4, {0x0, 0x7fffffff}}, {0x9, 0x1, {0x0, 0x7}}, {0x8, 0x9, {0xb926aa0bcfda4b40, 0x1}}, {0x100, 0x4, {0x0, 0x8c3}}, {0xd2, 0x3, {0x2, 0x5}}, {0xfff, 0xfff8, {0x2, 0xfffffff9}}, {0x3f, 0x8000, {0x3, 0xffff}}, {0xffc1, 0x44, {0x1}}, {0x8, 0x4, {0x0, 0x40}}, {0xb29, 0x1, {0x0, 0x5}}, {0xf36e, 0x40, {0x0, 0xfffffffe}}, {0x3f, 0x0, {0x0, 0x5}}, {0x1, 0x3f, {0x1, 0xffffff81}}, {0x4, 0x3, {0x2}}, {0x3, 0x7, {0x1, 0x4}}, {0x3, 0x7ff6, {0x1, 0x40}}, {0x1ff, 0xfffd, {0x2, 0x5}}, {0x7, 0x0, {0x0, 0x7}}, {0x2, 0xc7d, {0x1, 0x7fffffff}}, {0x6, 0x3, {0x2, 0x80000001}}, {0x200, 0x7f, {0x1, 0x6}}, {0x9, 0x8, {0x0, 0x800}}, {0xdf, 0x0, {0x2, 0x3}}, {0x8001, 0x2, {0x3, 0xfffff801}}, {0x9, 0x8000, {0x1, 0x400}}, {0x1, 0xfff, {0x2, 0x7}}, {0x9, 0x8bde, {0x537ba61c0bc65799, 0xb2e2}}, {0x38, 0x200, {0x3, 0x7ac}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x80, 0x7f, 0x1ff, 0x0, 0x8, 'syz1\x00', "3a48cf73d751e455e8113a695a4a736510a91e20074f700971b20dc080ff55e0", "0188b6a948e581211c8b2cb31b99feafacdc39413e1b5dea3ad4e725e0bcc6fc", [{0x7fff, 0x7895, {0x3, 0x5}}, {0x81, 0x401, {0x3, 0x1}}, {0x8, 0x2, {0x1, 0x7}}, {0x1, 0x3, {0x1, 0x2}}, {0x8000, 0x8, {0x2, 0x98}}, {0x4, 0x74, {0x2, 0x23a7}}, {0x2, 0x2, {0x2, 0x6}}, {0x8, 0x3f, {0x2, 0x7}}, {0x7, 0x2, {0x3, 0x7}}, {0x1f, 0xf55, {0x1, 0x10000}}, {0x6, 0x3, {0x0, 0xffff}}, {0x0, 0x6, {0x1, 0x80}}, {0x1f, 0x3, {0x3, 0xb91b}}, {0x0, 0x2f2b, {0x1, 0x2}}, {0xfda, 0x8001, {0x2, 0x7}}, {0x20, 0x0, {0x3, 0x902}}, {0x800, 0x6, {0x2, 0x36b5}}, {0x5, 0x5000, {0x0, 0x9}}, {0x100, 0x2, {0x3, 0x9}}, {0xf1f, 0x80, {0x0, 0x40}}, {0x5, 0xfff, {0x1, 0x4}}, {0x6, 0x7fff, {0x1, 0x9}}, {0x3, 0x63, {0x2, 0x36000000}}, {0x0, 0x1, {0x0, 0x1}}, {0x1, 0x0, {0x1, 0x6}}, {0xfff, 0xbd, {0x1, 0x101}}, {0x40, 0x2, {0x3, 0xf417}}, {0x3, 0x8, {0x1, 0x9}}, {0xfff7, 0x3, {0x3, 0x1}}, {0x8d73, 0x7, {0x2, 0xb41}}, {0x2, 0xfff9, {0x2, 0x8}}, {0xc, 0x9, {0x0, 0x5}}, {0x7f, 0x0, {0x3, 0x6}}, {0x5, 0x4, {0x0, 0x6}}, {0x1ff, 0x4, {0x2, 0x34ad}}, {0x80, 0x2, {0x1, 0x6}}, {0x13d, 0x3, {0x2, 0x4}}, {0xf366, 0x1, {0x1, 0xbcc}}, {0x40, 0x6, {0x3, 0xffffff70}}, {0x2, 0xff80, {0x1, 0x3f}}]}}}, {{0x254, 0x1, {{0x3, 0xf0cb}, 0x40, 0x3, 0x6, 0x6, 0x1d, 'syz0\x00', "3043566d2665493bd3500034272265a6a2f793814212e658c16b98e39d05ac3f", "da016987fe48ac6636e668c3c63b898a06672495d56542d5776025f9584223a4", [{0x9, 0x9, {0x1, 0x7fffffff}}, {0x6, 0x2, {0x2, 0x800}}, {0x1, 0x3, {0x2, 0x26e6feb6}}, {0x40, 0x101, {0x3, 0x2}}, {0x5, 0x9, {0x2}}, {0x5, 0x20, {0x2, 0x9}}, {0x1, 0x8001, {0x1, 0xfff}}, {0x101, 0x6, {0x3, 0xfff}}, {0x0, 0x3f, {0x3, 0x8}}, {0x8, 0x80, {0x1, 0x401}}, {0x1ff, 0x100, {0x2, 0x101}}, {0x8000, 0x2, {0x0, 0x10000}}, {0x5, 0x768a, {0x2, 0x692}}, {0x5, 0x8, {0x3, 0x2}}, {0x1000, 0x8, {0x3, 0x467}}, {0x8, 0x7fff, {0x3, 0x7}}, {0x4, 0x7, {0x2, 0x1}}, {0x7, 0x9, {0x0, 0x8eae}}, {0x4, 0xf2d, {0x1, 0x4}}, {0xd1, 0xffff, {0x1, 0x6}}, {0x1, 0x0, {0x0, 0x20}}, {0x3, 0x400, {0x2, 0x5}}, {0xffff, 0xaa3, {0x2, 0xffffffff}}, {0x4, 0xfffc, {0x3, 0x2}}, {0x0, 0x6, {0x1, 0xfb4}}, {0x800, 0x5, {0x3, 0xff}}, {0xf800, 0x6, {0x2, 0x1}}, {0x6, 0x1, {0x2, 0x80000001}}, {0x7, 0x20, {0x2, 0x7fff}}, {0x800, 0x7}, {0x1, 0x2, {0x0, 0x4}}, {0x1000, 0x4, {0x2, 0x1}}, {0x8, 0x7f}, {0xf4a8, 0x400, {0x3, 0x3}}, {0x7f, 0x684, {0x0, 0x3f}}, {0x200, 0x7}, {0x81, 0x8, {0x0, 0x5}}, {0x9, 0xfff8, {0x2, 0x9}}, {0xc62c, 0x3, {0x1}}, {0x3, 0x4, {0x2, 0xa0d0}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x1, 0x3, 0x5, 0x1, 0x4, 'syz1\x00', "f545b6aec9625fcc5fe52e57de55bd6876c30c0aabf9fa5f47cc087036df7eb4", "8d35f0571dcee988d8678738eacd1e4e349854a0e35e48d0421f59a3c83bb024", [{0x81, 0x1f, {0x3, 0x1}}, {0xf045, 0x93, {0x3, 0x8}}, {0x200, 0x1000, {0x3}}, {0x1, 0x2e, {0x0, 0x6}}, {0x6, 0x4, {0x2, 0x1b7}}, {0x4, 0x6, {0x2}}, {0x4, 0x4, {0x2, 0xfffffffb}}, {0x1, 0xf0, {0x1, 0x80000000}}, {0xfff, 0xfffe, {0x3, 0x7}}, {0x1, 0x9, {0x0, 0xbf06}}, {0x9, 0x8, {0x2, 0x5}}, {0x73, 0x326a}, {0x4f38, 0x14, {0x0, 0x9}}, {0x1000, 0x2, {0x1, 0x6}}, {0x5, 0x3, {0x0, 0xe1f}}, {0x3, 0x3, {0x3, 0x200}}, {0x3, 0x200, {0x3, 0x2}}, {0x1, 0xca, {0x2, 0x3}}, {0x3, 0x35a, {0x3, 0xd}}, {0x5, 0xfffe, {0x2, 0x7}}, {0x1, 0x5, {0x2, 0x2}}, {0x8, 0x0, {0x1}}, {0x1, 0x6e4, {0x2, 0x1}}, {0x0, 0x8, {0x0, 0x4}}, {0x100, 0x6, {0x1, 0x20}}, {0xbf, 0x4}, {0x6, 0x7fff, {0x0, 0x1}}, {0x8, 0xff00, {0x0, 0x3}}, {0x80, 0xee4, {0x0, 0x6}}, {0x5, 0x9, {0x0, 0x4}}, {0xd2, 0x8, {0x0, 0xac28}}, {0x81, 0x9, {0x0, 0x4}}, {0xa908, 0x2, {0x2, 0x800}}, {0x9, 0x0, {0x3, 0x7}}, {0xbb, 0x81, {0x3, 0x6}}, {0x6, 0x8, {0x3, 0x401}}, {0x3, 0xe4d2, {0x0, 0x8}}, {0x9, 0x0, {0x2, 0x8001}}, {0x1000, 0x5, {0x0, 0x8e}}, {0x5, 0x7, {0x2, 0x10001}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x26040001}, 0x40) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) [ 1260.577381] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1260.587586] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1260.588166] CPU: 1 PID: 7498 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1260.588804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1260.589678] Call Trace: [ 1260.589885] [ 1260.590065] dump_stack_lvl+0x8b/0xb3 [ 1260.590383] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1260.590815] p9_client_create+0xc85/0x1050 [ 1260.591159] ? p9_client_rpc+0xad0/0xad0 [ 1260.591478] ? lock_is_held_type+0xd7/0x130 [ 1260.591839] ? lockdep_init_map_type+0x21a/0x7e0 [ 1260.592221] ? __raw_spin_lock_init+0x36/0x110 [ 1260.592610] v9fs_session_init+0x1dd/0x1670 [ 1260.592964] ? lock_release+0x3b2/0x750 [ 1260.593283] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1260.593674] ? lock_downgrade+0x6d0/0x6d0 [ 1260.594010] ? v9fs_show_options+0x690/0x690 [ 1260.594369] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1260.594780] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1260.595189] ? lock_is_held_type+0xd7/0x130 [ 1260.595538] v9fs_mount+0xb9/0xbd0 [ 1260.595834] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1260.596231] ? v9fs_statfs+0x4d0/0x4d0 [ 1260.596539] ? cap_capable+0x1eb/0x250 [ 1260.596860] ? v9fs_statfs+0x4d0/0x4d0 [ 1260.597171] legacy_get_tree+0x105/0x220 [ 1260.597506] vfs_get_tree+0x8e/0x300 [ 1260.597819] path_mount+0x1310/0x1e20 [ 1260.598141] ? kasan_quarantine_put+0x8b/0x1f0 [ 1260.598517] ? finish_automount+0x8d0/0x8d0 [ 1260.598867] ? putname+0xfe/0x140 [ 1260.599164] __x64_sys_mount+0x282/0x300 [ 1260.599496] ? path_mount+0x1e20/0x1e20 [ 1260.599823] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1260.600241] do_syscall_64+0x3b/0x90 [ 1260.600539] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1260.600948] RIP: 0033:0x7f46087a4b19 [ 1260.601243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1260.602640] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1260.603201] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1260.603767] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1260.604310] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1260.604860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1260.605418] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1260.605972] 15:27:40 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:27:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 76) 15:27:40 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) [ 1260.668920] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:27:40 executing program 2: pipe2$9p(&(0x7f0000000040), 0x84800) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[], 0x13) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r4, @ANYRES32=r7, @ANYRESHEX=r6, @ANYRES64, @ANYRESOCT, @ANYRES64=r5, @ANYRES32, @ANYRESOCT]) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4405, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_loose}, {@afid={'afid', 0x3d, 0x800}}], [{@euid_lt={'euid<', r2}}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '{!-%{\xb4n@[{'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_type={'subj_type', 0x3d, '}%&'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@smackfsroot}, {@obj_type={'obj_type', 0x3d, '\'$.-'}}, {@uid_gt={'uid>', r6}}]}}) [ 1260.753687] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1260.754314] CPU: 1 PID: 7512 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1260.754940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1260.755818] Call Trace: [ 1260.756025] [ 1260.756207] dump_stack_lvl+0x8b/0xb3 [ 1260.756519] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1260.756944] p9_client_create+0xc85/0x1050 [ 1260.757295] ? p9_client_rpc+0xad0/0xad0 [ 1260.757625] ? lock_is_held_type+0xd7/0x130 [ 1260.757972] ? lockdep_init_map_type+0x21a/0x7e0 [ 1260.758363] ? __raw_spin_lock_init+0x36/0x110 [ 1260.758732] v9fs_session_init+0x1dd/0x1670 [ 1260.759074] ? lock_release+0x3b2/0x750 [ 1260.759389] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1260.759780] ? lock_downgrade+0x6d0/0x6d0 [ 1260.760120] ? v9fs_show_options+0x690/0x690 [ 1260.760467] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1260.760874] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1260.761279] ? lock_is_held_type+0xd7/0x130 [ 1260.761629] v9fs_mount+0xb9/0xbd0 [ 1260.761908] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1260.762293] ? v9fs_statfs+0x4d0/0x4d0 [ 1260.762599] ? cap_capable+0x1eb/0x250 [ 1260.762916] ? v9fs_statfs+0x4d0/0x4d0 [ 1260.763232] legacy_get_tree+0x105/0x220 [ 1260.763566] vfs_get_tree+0x8e/0x300 [ 1260.763876] path_mount+0x1310/0x1e20 [ 1260.764175] ? kasan_quarantine_put+0x8b/0x1f0 [ 1260.764546] ? finish_automount+0x8d0/0x8d0 [ 1260.764906] ? putname+0xfe/0x140 [ 1260.765198] __x64_sys_mount+0x282/0x300 [ 1260.765529] ? path_mount+0x1e20/0x1e20 [ 1260.765844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1260.766262] do_syscall_64+0x3b/0x90 [ 1260.766569] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1260.766990] RIP: 0033:0x7f4827e8ab19 [ 1260.767274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1260.768662] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1260.769258] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1260.769825] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1260.770378] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1260.770923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1260.771478] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1260.772059] [ 1261.306766] audit: type=1326 audit(1661959661.484:113): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7479 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:27:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x1000000000000) 15:27:56 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x2, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:27:56 executing program 0: socket$inet6(0xa, 0x801, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000100)={'ip_vti0\x00', r2, 0x8770, 0x8000, 0x7, 0x9, {{0x2b, 0x4, 0x3, 0x19, 0xac, 0x67, 0x0, 0x11, 0x29, 0x0, @empty, @empty, {[@rr={0x7, 0xf, 0xd8, [@multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x24, 0x4c, 0x0, 0x4, [0x7, 0x400, 0x1f, 0x4862, 0x0, 0x7fff, 0x26, 0x5]}, @rr={0x7, 0x1f, 0xbc, [@multicast2, @local, @multicast1, @private=0xa010102, @rand_addr=0x64010100, @remote, @broadcast]}, @ra={0x94, 0x4, 0x1}, @end, @end, @timestamp_prespec={0x44, 0x3c, 0x6c, 0x3, 0x8, [{@remote, 0x1f}, {@multicast2, 0x3}, {@rand_addr=0x1, 0xdf22}, {@multicast2, 0x7fffffff}, {@empty, 0x7}, {@loopback, 0xcdfd}, {@private=0xa010100, 0x8}]}, @end]}}}}}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @random="ec67e48acdc3"}, 0x10) sendmmsg$inet(r0, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) r4 = socket$netlink(0x10, 0x3, 0x4) close_range(r1, r4, 0x0) 15:27:56 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) 15:27:56 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 93) 15:27:56 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 77) 15:27:56 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:27:56 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 1276.215819] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1276.222596] audit: type=1326 audit(1661959676.400:114): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7526 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:27:56 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 94) 15:27:56 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7) write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) pipe2$9p(&(0x7f0000000000), 0x0) 15:27:56 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) [ 1276.347887] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1276.348479] CPU: 0 PID: 7545 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1276.349096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1276.349937] Call Trace: [ 1276.350137] [ 1276.350317] dump_stack_lvl+0x8b/0xb3 [ 1276.350627] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1276.351047] p9_client_create+0xc85/0x1050 [ 1276.351378] ? p9_client_rpc+0xad0/0xad0 [ 1276.351694] ? lock_is_held_type+0xd7/0x130 [ 1276.352040] ? lockdep_init_map_type+0x21a/0x7e0 [ 1276.352414] ? __raw_spin_lock_init+0x36/0x110 [ 1276.352774] v9fs_session_init+0x1dd/0x1670 [ 1276.353111] ? lock_release+0x3b2/0x750 [ 1276.353421] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1276.353808] ? lock_downgrade+0x6d0/0x6d0 [ 1276.354133] ? v9fs_show_options+0x690/0x690 [ 1276.354471] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1276.354854] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1276.355238] ? lock_is_held_type+0xd7/0x130 [ 1276.355579] v9fs_mount+0xb9/0xbd0 [ 1276.355866] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1276.356246] ? v9fs_statfs+0x4d0/0x4d0 [ 1276.356546] ? cap_capable+0x1eb/0x250 [ 1276.356863] ? v9fs_statfs+0x4d0/0x4d0 [ 1276.357162] legacy_get_tree+0x105/0x220 [ 1276.357494] vfs_get_tree+0x8e/0x300 [ 1276.357790] path_mount+0x1310/0x1e20 [ 1276.358089] ? kasan_quarantine_put+0x8b/0x1f0 [ 1276.358461] ? finish_automount+0x8d0/0x8d0 [ 1276.358802] ? putname+0xfe/0x140 [ 1276.359095] __x64_sys_mount+0x282/0x300 [ 1276.359410] ? path_mount+0x1e20/0x1e20 [ 1276.359724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1276.360137] do_syscall_64+0x3b/0x90 [ 1276.360438] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1276.360836] RIP: 0033:0x7f46087a4b19 [ 1276.361117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1276.362442] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1276.363004] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1276.363528] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1276.364076] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1276.364601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1276.365124] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1276.365673] 15:27:56 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x3, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1276.394941] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:27:56 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 78) 15:27:56 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 15:27:56 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x4, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:27:56 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 95) [ 1276.484335] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1277.050127] audit: type=1326 audit(1661959677.228:115): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7526 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:28:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 79) 15:28:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x8000000000000) 15:28:10 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000001880)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f0000000100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa50}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xc0, 0x0, 0x9, [0x81, 0x8000, 0xe1b8, 0x6]}, @timestamp_prespec={0x44, 0x2c, 0x6c, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x81}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}, {@rand_addr=0x64010102, 0x73}, {@multicast2, 0xffffff26}, {@rand_addr=0x64010102, 0x1}]}, @ssrr={0x89, 0xb, 0xb7, [@loopback, @rand_addr=0x64010100]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x13}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010101, @multicast1}}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@generic={0x86, 0xd, "d560ca454d1b9250de09be"}, @timestamp_addr={0x44, 0x4c, 0xa0, 0x1, 0x1, [{@private=0xa010100, 0x1}, {@empty, 0x3}, {@remote, 0x7}, {@multicast1, 0xff}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x10001}, {@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x7fff}, {@multicast2, 0x6}]}, @timestamp_addr={0x44, 0x2c, 0x31, 0x1, 0x3, [{@rand_addr=0x64010101, 0xf714}, {@loopback, 0x100}, {@multicast2, 0x7}, {@multicast2, 0x5}, {@loopback, 0xffffff82}]}, @end, @generic={0x7, 0xc, "7e51038d0a9059cc6157"}, @noop]}}}], 0x1a0}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000300)="f62bab283fa5342c7ff4a6eb3069a6aac65da0f9266ec952b556effc61d2a9a489dc186a83e3e1f9850dc86694b4da488f324e67da6f5ca816764eac31fd7ad564ba2e930b45f62489f9ca00c51cd25d946de59a17cbe61da17be222a9d0ab9d65f38f31870d8e28e53570", 0x6b}, {&(0x7f0000000380)="edc66430805d1176f70b495d", 0xc}, {&(0x7f00000003c0)="e5adbe57817baca21436fa0cbbb5a9567c027d7133e288115cba10cccd13ee03abaccd98c1a3a4da8b3df8645a895f1e305775370638a16af1f6884fc7ef6846289ff6098f51c7832e93896757fab3232633247eb678b2e22409b4f13075ded1fa801d404d41d9b2f5542a84dce9718f28d03a3d2634dd286c2de59a9de69d6991ecab8db2fc61bc3e533d3afc2c9ae3efae41af4224136bfe9389680b2e5ad2b17463e6e33a7155d66b1d76b9db6a876232f4486857c4d177e82cdc403ef4725624e4b1c307de79cfb3b20d17e76f4112ebd02009127cfa795752c6506e77f1c66a6e2ec4c09f12ecefcd0332cc6935e1fec977644e", 0xf6}, {&(0x7f00000004c0)="01f0087fb0eb256c9ff9ad96b9e58a257925c8ebc7c488efc817e330a35500f0c5ca63ff068a0921c24f980484c192d0cb51e60d2db02a6c14b0df2e6838bf4877c8b595d03b4b70d54a5a290defd328612414c49ae922dab35092076a3713e3d27bf367bbd0801a20ba246697a11682bfc25258dbb5d021cd2637dae79700460d1bc31cc1324e65c60a8baca4920a452b33bb15b4e2d968b0f88840fb7de568be9872ab0ffc94bfb5ec2b90a69c095268548d40acc3f1c2fdc3fb65e976f6d1524c19c4a8b912ab750272996be4ce61d1b58d337f9bf4c50b84967470622ed58eacc410c14fa7ec7ee1fccb3152222fa5d7476c3b9ee19770", 0xf9}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)}, {&(0x7f0000001600)="d706cf5ce59c1b9a9813637959b98e5bf8a8b0d4ed80e3e2b35d79ed2a182955047a636fa236673360a99bd7063582e15b326732dffae123", 0x38}, {&(0x7f0000001640)="6f254e28437b6a73c97bc5cebd474101d65c4ce507666175663f41164070f7b68c83273ec230be17920900bc48f83b6e5de954810892ff139bce7abdc1b890299fa44bafb3422f1c3b1932312f9ae83fa8ee8f9cf73bd6913bacbee2363d39a85b32b112ad749ed9e8be558d17be4517da1e443e473e449a32272e5a18c863d29584932753448fbe43c4e053d10217b3423c5349d0d36052ae9847f4af0e021c6c16e5e122e1fa7d01a9b09b350dd11ae4845651dec932574e1daee8132463ab51373f935b61c174ffcaa786457a68cc06435332d2c4fb7710f1f52b6e5aaff9429dd7c1a210", 0xe6}], 0x8, &(0x7f00000017c0)=[@ip_retopts={{0x94, 0x0, 0x7, {[@rr={0x7, 0x13, 0x68, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @local, @multicast2]}, @rr={0x7, 0x17, 0x98, [@empty, @empty, @empty, @loopback, @multicast2]}, @lsrr={0x83, 0xf, 0x79, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x32}]}, @ssrr={0x89, 0x23, 0xb8, [@multicast1, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @private=0xa010100, @private=0xa010101]}, @cipso={0x86, 0x24, 0x0, [{0x0, 0xe, "bd1240910980e20df76a125e"}, {0xd51b15187dfed52b, 0x10, "6f54da6d4f82626ead9b9e24e559"}]}, @ra={0x94, 0x4, 0x1}]}}}], 0x98}}], 0x3, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000015c0)={r3, 0x1, 0x6, @local}, 0x10) r6 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0xb) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001940)={'erspan0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000001980)={r7, 0x1, 0x6, @broadcast}, 0x10) 15:28:10 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 15:28:10 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000100)={{r0}, "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"}) 15:28:10 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x5, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:28:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 96) 15:28:10 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 1290.279064] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1290.290222] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1290.291300] CPU: 1 PID: 7572 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1290.292482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1290.294077] Call Trace: [ 1290.294455] [ 1290.294813] dump_stack_lvl+0x8b/0xb3 [ 1290.295367] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1290.296177] p9_client_create+0xc85/0x1050 [ 1290.296827] ? p9_client_rpc+0xad0/0xad0 [ 1290.297422] ? lock_is_held_type+0xd7/0x130 [ 1290.298047] ? lockdep_init_map_type+0x21a/0x7e0 [ 1290.298762] ? __raw_spin_lock_init+0x36/0x110 [ 1290.299415] v9fs_session_init+0x1dd/0x1670 [ 1290.300087] ? lock_release+0x3b2/0x750 [ 1290.300668] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1290.301368] ? lock_downgrade+0x6d0/0x6d0 [ 1290.301979] ? v9fs_show_options+0x690/0x690 [ 1290.302619] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1290.303354] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1290.304119] ? lock_is_held_type+0xd7/0x130 [ 1290.304762] v9fs_mount+0xb9/0xbd0 [ 1290.305290] ? v9fs_statfs+0x4d0/0x4d0 [ 1290.305880] ? cap_capable+0x1eb/0x250 [ 1290.306447] ? v9fs_statfs+0x4d0/0x4d0 [ 1290.307008] legacy_get_tree+0x105/0x220 [ 1290.307603] vfs_get_tree+0x8e/0x300 [ 1290.308166] path_mount+0x1310/0x1e20 [ 1290.308753] ? kasan_quarantine_put+0x8b/0x1f0 [ 1290.309393] ? finish_automount+0x8d0/0x8d0 [ 1290.310040] ? putname+0xfe/0x140 [ 1290.310560] __x64_sys_mount+0x282/0x300 [ 1290.311181] ? path_mount+0x1e20/0x1e20 [ 1290.311764] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1290.312528] do_syscall_64+0x3b/0x90 [ 1290.313122] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1290.313907] RIP: 0033:0x7f46087a4b19 [ 1290.314467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1290.317177] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1290.318298] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1290.319360] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1290.320433] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1290.321518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1290.322544] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1290.323614] 15:28:10 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) [ 1290.371822] audit: type=1326 audit(1661959690.548:116): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7579 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:28:10 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) listen(0xffffffffffffffff, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@phonet, &(0x7f0000000000)=0x80, 0x800) vmsplice(r1, &(0x7f0000002700)=[{&(0x7f0000000100)="9dc3c7c7e6c0007725f1c03b9ff257ee76ab7d0ad268e76b7dcd77797829209f33dbbe18c2c881bc9768ad2ff50c0a3d05c497ea064d2a62bddf0e9002fec5e1fe8ddd12fdebfd61a2869088081cd08712113824563e1109c3faa1466ac7747753d190b7fd7a92a0f96406f2101c81814598ab1486d4fda150b7ea4c711d78dba408e3a48c55d46efe38ece2c6cfc065ac02fd35fe", 0x95}, {&(0x7f00000001c0)="af093d0d57c4db70897568fa4b444a63a35138a7f5a5dc79ec2254d6dcfdd917f7d2fb236a44d9bfe8", 0x29}, {&(0x7f0000000200)="fe9da3e1e11046854b6198057900f95f893d9706c1d087c26dd66ba6b4428f75cdf699d14c108de91589db3583750a92183d8d54a8bf5bc8058393d689c607899a0aebc3c07f762ac00ea689c0b13e3a8c490b05c1fed959128eb500005ddd2eec7c5319d4738dd91b68f63a16b633975fe8a6e54516a607ee095119f13b1127a8c01339d187e66f99e6f3e4141dab66c3d9fbf10e101310311eb3aab74392dba219fe575ff9a51b499a5d202842e7be2420aeca4ea487aca5624ed326bdfb540f0c38691c8d92b3458b87f37d2a0c25cd5e62a635549fb072a13845ed423015e34167a74d15d3c75df41a0170d3dfa3", 0xf0}, {&(0x7f00000037c0)="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", 0x1000}, {&(0x7f0000001300)="df2fbe9f867f2cf8485a230029df80d30a2b16f1bd769880a7f1e1ece535c6791659bf23fe9c59241a46f3d06ec2aef35426d26519e61c314b5c4418b97b84596d4348aaeb7a942adb3d858c7613659ca894f4663891e6ef714cac69d5709449f258f9ff97cad0e0f9c4beb0aae72ef8d73480eea1d736504a65d8f741aeb7c1a190da5fb27695dea8fd02edb890271a15b35129442f1924b22ea09f9cb82975d9514a70a9ef08151f6a8f50f5d0a4672b5969b30b307ea35f2f45396a9678b789366cebb07c3a8b0f6f59c98b408a50eee41648cdca69206024d0ddf49ef1ae439796086246419357f58013780cea5805ed9334860a7dbe89cc61ba3bc25377564157bc2349369e4f7991a1a36e3438489dc848d8da7c2dd2ef09cb4eaec87ed34249d1de445508edf23e7493b4558d3cbc42034ccba2a771fc6371f83765762c028242e2cabd98c5f871c1d1f0538676c0f15bc8e6b0db68236fbc39005a30ba89fe9b8ca377447478fb142c836fd1fb2a0e8fa2999bbb93b68b422bd4016cc2b40b5edcf949cbc9cca63df002f96dad5ab490e4f2e321c97024997934c2270abe9ca4d9a2b0ca56f5dca3008c1556415d98e410548268f1d777eb99db113c9b2073a965f06f68f9533febf72df442cfb9580437e8ba7457f42297e72e1a2462557e748dde1326008c01dad35e77b104247654adada48f735797b76a5d593b5c72609270bf255133050cf1b4637bcfea5da47d5a0e943b426130139c3847ef212a4a0119688717fb155ceae52ba9a7d8ec6c35ee1f7ff41d72c2fdd25ead0bd268e6f5cf358d58f28dd1fc65bbeb1418f0db2d788f69fdf2956fecbadb5233b5345f78daf4dff9368c24989bb9d4655cd17bbc1125231f365665e049f3fd852abb4d0c2cfcbeb6018686f904dac85593951a2545f82a94280de45fb9745c66b0f5049f0b791dbf5e4efc9baddfd16abcff24d435bf912117035eb21394d608ae3b5d2fafe1347c2caf8821d3c7d4e9701c0e14819b40b9ced14b819aafee95d3a9190a7accc7637159e2da270e482fd7b47fc3a4a603c555a12c9d93fdd450024e952043b6c2c3fa02a78d870fc48595c6266cc3ee638581793f76882d1a0506564954f99499a4ab9b2abb53268835d4377317cb8389e73ccbf25088d6d9ec3f6ff5cf7c30b2d7e99e853a09bcb6b3f8669c6cff4df3162554470cbfb832415670acff77af2eb8778437125aef149bd07d7c38525622b1e83f5772476438a8a8a6a25a01672e111175cbf9959f8039416dbf9ad7cfa32fb265f87f316951f55816d8fcf00291f08d99cfb64f0dfbd227a251cd86bb5586e2ce0b359c08108cf4bb9ab178ad04069a12178b358265d232bdcb00c94a9cc733b7f1b3f6d434969e7c7beb0dcb660a85740f3b83931d9bf0873afdfd5dee90d396f35b0fea3653ed73585865547059bb31442c2aa85315ad9b32a574c61eb39a71ee4068994b60a508708b5c32575cd9c16436a47c70eabf5e5a813db309f199ce3312e96e4aeb8b53ab00f6dfaa89743da5c6afff88de11b5c3a37c20bf252e8155f09763f8132559f90d2c249e271c3145fc6f3b881d9ffaed070d0cea7019a798d34ba2de35c51a7f96a0d96e1dc6452a3c9df00b119414dc9079815b4c83d4729e5743aa53a227628fd0652796bd83615d3a1c7e69e53344508b59008486fc858a92a140b106871b2bc166b48b120666a7ef716d6c5d6f78acd69bcc3b5dfff3617e3208908d80c9f7fc87019e4dbab1f68ebf2ac72bb8a2c0e438608e176ad3c8b0dffacd91f52745771a1c4ddfcf31a03be054f25212478e18f676875c1ae458c000b002510bcae286a9424b632393c2083c82bc7cb41df1269deb252d2442ffe592124394d868d44d04177a4a7ba85b21319d229f0a1650a6f9a5ff2aa0da38c383508b2ca6d507593fe4ba28d50edcff5ce98ed94cc5bcfb90aa1fa05ca8cd298a408e73e84fe79ca7b1960b4462ebfad4d8b26c39324b192ac1aae8b996b21377dd4a808ae458c02b5845ea080e7c5a0df6a3b93f9461dcc37c4cea059021166d5ed4da9233bbffba117708bd0fe079a63d102f82bf6d82e4179dcb6a79ae0b27191513ffca791304addeb028f88801ff6c49fd4d1aa1c6a0b7b3034539e260dfb482dd03b592c37528ee28e62123d5acb22170e2c2ae01cca0ff1bea05cea84b6c48adecc3bf3b1cfd109a74a519db26d2e3bf1c0b942c2370760255d789963cd32038f79f2abd8da7719a3d60c692022d03cbced666323c94ea103ed7b84557848b95f7637ca5175360316fcd04e11799fe265f4c4acd77f37f2b171677754abd8f964ad722ee53ec83e105924c4a9a75ffedce698c9ba5984a643e564c5a45bf64051839282bc3b335e78e7f46b29c56ee00432d6079805186c63ff8a6df53211cfcb24cc1867aeb997e2f02ff5c9f8afdcfc89941c8ea2a2b1fa0915a8257dc032bae185f47f001dee3f5a7179e1638ae2aef9043fb6f5031b222c64fccac520f7160dceb07ed36743765a373fedf4999b6215441ebc3faaeeaae70b3c5165db8a98b0d8414b558b3068191f43f16b7cab82598995b08585a0f8dd6234ce3b660648913071b2dc1be30b44c6548c103fed9dab783631e1cbfdc6e0510a68dd0bff8f3134d804f8974b942de12999949d69ddd857b731b9fb07b15c78d059219eb09f141d2f310c256a2bfd91eb4f8063943b43cfebfda781aa8230478df5dde09d756a3b791b21fe3c50d9a777df7675f6e1c68e022d0c3ded6c1c743ca02278395d54b869f5e3a7a5cd41cf802c8e1fb68c26f4852309a8bf527fd2c8a9d2efee61eaf35e97981366f818c8b2f5b0a483c5dfa328a089aea9779a7bb8f7c61b8380e48516f54b43b3ac19e215dc24f0c4e06c1b9ae833a207ac786bae15db4242ce9dd54fbfd3b036cf98ee95a02278c3b68f990682b53231d7f309c1c582ccbca829fab9e09e708830816d723b82db4ad7f2adaa7d3e1c4036996ac45fd43e1028e6c7af98c0c44a5fd91dbbc58af41a1bba11519214fa45ebf10875d06e2f7c2619dc198702c3925202fa2b4d776d90714856ef66386c5ac7948705a87193f31e3dff98b674b135708ea977a0d60a9d7adbcd6f3269c30219dc6dfce0283fd56d2980df87631f54da3c6a95a64004de3e12019fe92dd6691724c9143c057784540e45d9b3fb47c90877348c6ff9c1bcd50ab4bda81c3e675c6cde6d1efbf1061768625f63e3e827917c05a57e56a61fc666fc1d2c1da7b7a33687e757fdf4cbf9ac848349a1db8507cc7e3596c5b83ecc52ba53e25285aa4fd5411413605523b54c840806a0a3618c597ceb3540656ba5ac69b1bef3a9a2b4a57e28376c89e148a6a32c8de481929a7dd958b8e97fa0257cf583ef43af6f216b156f1191158cdaf40b6cb71d45526f0b34f9e15d09b1d5bfaf9caf0cb3cc6fb447b856a38da621b1ca19cb721b67af8df91315d86f219e9664217a82627825d1891244bcc599cebfb3d257c9a567300af5f7818d921dbdc4d0b299727ac0b1531cb3b744f0a3e24b41329c1e980256b90008a4af99b2c813fa43814595ca0950053a5a408747170083cfdfa6589f30f3e4bde394e2e2cc956a9f6ba1c1544405b8a5d7e68003748ed0f1f0d3b374f962b6b46577a480f2ee31a78cf2512df4ea85180876a42a29cfb141fbf5c98db3089846c4c7f41af368652491b54a1b0c080264b140d3f6502ac35efd02a755cca6cb5a5d28216a5d64319b502ffc2e1b061bef33fb2c3e4e0abcb5579f7a6f081000b5918a64cc0c63fa9e11e94f2d5568ccfa8cae09a1dbd079903b1f94e44dcd26734b21fe5598df6c3747e7b252010a5248f753e8980866360ce23eccc251338d5ead38d6e153e00145e7421f81683880c655b109c82789ee67c55d04ccd3ab7e5a3b14d561ec393aa77b08796fa6edbeb87a3892b7e0b7bcb0c8327b1648a2c7b61064de0222d47fc629a2b8726baee0d4e6236a500c5d74f1f28af6ab90ae9b5ee5dcb4be15761eca2fd73cdaa9b286e2b9ecfbf88f38c7e592c4bb69a53966f511da238924de7d696e2a5d15ea9175a732b5ce1b7355b7d90889dcdb9701ad70cb6760aa6d5c47ef7ca4ba5a8c448e134841f42b16d1e77b3d3bb503fa994ba2a4ec39f880f86e9f07ed39ba4459242425e6be1a08807c013ec55adb76c253f24af209bf5e45822883e4c24999cbe56defc513470c3bfbea2bc98a5cdfda630b3266f41e050dfa254091adfe3d66a2aeefb2b5a1d55f4cb8633ca47e9c9d3262235f62df77d7269d74791974811b63c50db8baf723a6430619967018ed9000d490e95a314e54e927333abaa0f7d1c50c62d5feacb1d6b6c78fcf19e87d5196725278311824dd000e647d5ba7fead5252a3d680a70956b8aad8b7d99393a9cb2b82539fc41c898c492b389eb4b9aa73b13599114a99a89e5d1fb6c99e09df5f693c25989ab0ede5237ad9ee20e15fa775675b6ad5293e4e48c32019a3bd42f8f38afcc2e7194889746d8e59b9ee8fa14429590653b8323a5a94d17afcc2dcafe8ec29f1a1727da51db688e056d3893705432ef869da11948f2b3b3a8ef055163296113f60ab3dc75c1a17f79562ebc997066e954228b1b351b4cb00b60e3e2c3439547eb215dffd6ea1b259f9d75997cf002d014eafe16751bd095d5731b79ebef70c0e53c68fed9aeddbf871233fe8f828897162978451cb66000d1bd48520623549c7529cc32c9e19af5072210e27ec236c3068a20344c55b794a2f537d079d7779486cd0440e33b35217808142623564250b707bc93a548ba65ed7678150841613ab342f096ec80fc839253ceaa4359ca67594e825dfe7be61757ecf8cbe9d522c09705b37f87e20000ab3664425a2d086f5522fe12e2c4918f80ee34574c31e5cd22b2235aba884f1e7659e4883d2aeaa3575073a46bd979364776880f9f26ca3c955c622010123d585c6c37e786e848a3c464292b8f487df1be22eae9e6e833057163a8740cb3eee75450f2262422ae77e873291d13c23fc9dd0bc3b5be2b119dc5f843209fb367f52e72327158e840a431a8fb26a09547838c85b964b1b6f2c97767091a9a25d13fe3a7287241014eafb9cb1e98b8fcabe1ded1f63604b4b963ba83fc890b94e74edcb4ab732154632607c13234a17ca237b05209226f31ece5649c554f07d8f464746a92c8dc35a14c05d0ad5d0fe8729b0b686d36d06bdddbe9a71f83444650a19742c21ef5273d2c312d713e2d125f9939e6d317fb7f6704b01dbac2a5964d7dda1b96706aa5c3f976bd3c092bb5f4e8fe134eda1cff83734e652fc6db18775b455d71ff6514dc788f284046ac4314d894309bc72035b4761559edc072682e1890a71dfe2b7b789841f5874e1e59cb9db3821af1b4e6c1c98e0f4e7af97b514536159e3309f01a983b66128b1352670fe434c3969ab9fb37aee48571e84215c0d9bb4153d4179f46ec02833e35e6d5dc9fc789ecb6d6493ad016caf582d4224a7f546a73270784cd4eb89a72a4db29bdc2f82e9763911548636fbf0be37f3c2a49e35099a5f7c9030fdce2720667d8c522bcbd98ec30d11775d202773eaade7abe1b4bebf8062ee36609db6cd9fbdaf296ce123bf56cbcc4fa356d54796334d8a24e0df66d3dd01f0c6db15f0b5ffc3bf352309eb2ccdf763c6654288a2738873ccdbd9233e667ddc2d1c32e41c130cf483e285ad588d5747e42a8c728ac43c00ff873f6f428a40a99", 0x1000}, {&(0x7f0000002300)="8404f7ae07c4fe693011499b4b654f41d76d7841f7970a581c9f8a191902b3b95372b299bbbe243e5ad42daff49d86239e50abc37c1b1b4a7fe35dc09cd71015b96534d4e2c3a4273b071d11aa957790f224cd2a2d92edae0e644d31aef934ddb8c29dff564209299f38a549c592d939260cd0582ff56a867fa33546f15f9660a12a02c8af0348014f97c1406b18f77d98d7a6bb6c4a2ffe9a3adf8be2946abb73ea8bbd4bb55150a0b16ae9666393e700c04ab7a74242338f5893c3852d6a0fd11c9ae52aab707c28592334bc62bcb8", 0xd0}, {&(0x7f0000000300)="71a6851b0dd45318e547e9c46411fcc344efa9038efe11c25085e15407749162c7110a5c1d8213b406a1ef81d5da88467da7e20f6e765c2d552854d61166d281d2c99d35690ff30ac058886e7bf7cc567754467226589f13d97e49c98ed1cbcef8f62dbe8a52374dbcd835e43366b2293ff318e23b7f335a72198998827de87ec47b00c2d0a3b3a05e0732e495eabdc281ac4884a194d02edc40fc732d590907d414f5761319b9d1e0b0d71dec8c8d1bb48df38c043f7adbe32b76d07fa3b6ebdc83f156", 0xc4}, {&(0x7f0000002500)="dead43ee562c636db44683f637e5d5e375b0a2ac89ed9095350b11b6287957247fb8a201d538c2297d0cafd5d9a5c4a4a0f63345384e8f0e47e4c97a441673f25d32119fd4c32010c5e62e631d073ea56b8eb84a60020eef76825f3a95fc942df4285a604d2d034f84f996244651893ed7ae3c0f44fb380f61e8cbb4d97cac467b39c2d9b4e271630d7425fa3be735ef6a4727adb0f8a33053924412d8a60dbf7dd5aa42770a50019b16361e88931228abcbff80fd0ddfaa733838660ed763243ef38586591c86759785897969f3e1ed4eecc35673bb0262feb919b7a0a0411fe948dff4b6c79f0ca2c3933933d1", 0xee}, {&(0x7f0000002600)="c57e36fabc3d385098d0a83d0be89c3b77bb3b8b8ae4d78acea02819912436008843ba7f49513198e1d970a4464a231523a9d68a41af2e958c4e1adfc7b2fc6e444a7b3afb449382ad02195c5949f9eb9156c9a6da7992d6f7e7117c94ad3532c84a091c6d9bc6cc32", 0x69}, {&(0x7f0000002680)="b8421e314d222306d4ed9aacc137b18a35aefe165b8bed474dee4d062b3bd957d6a91d015ddba71f1617d3f48b943c3002d6cf7a389c7f92ece235d4b3f941080f3b4dd5b130eb11c2f56674423b48a0d7b7cf0f02b7ff4aec9cb3c9ac20923b0aa6", 0x62}], 0xa, 0xb) 15:28:10 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 15:28:10 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x6, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1290.457531] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:28:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 80) 15:28:10 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@private2, 0x10, r5}) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@initdev}, &(0x7f0000000080)=0x14) 15:28:10 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) 15:28:10 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x7, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1290.519050] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:28:10 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x8, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1290.572479] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1290.573083] CPU: 0 PID: 7605 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1290.573691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1290.574544] Call Trace: [ 1290.574737] [ 1290.574911] dump_stack_lvl+0x8b/0xb3 [ 1290.575206] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1290.575606] p9_client_create+0xc85/0x1050 [ 1290.575928] ? p9_client_rpc+0xad0/0xad0 [ 1290.576235] ? lock_is_held_type+0xd7/0x130 [ 1290.576561] ? lockdep_init_map_type+0x21a/0x7e0 [ 1290.576917] ? __raw_spin_lock_init+0x36/0x110 [ 1290.577267] v9fs_session_init+0x1dd/0x1670 [ 1290.577593] ? lock_release+0x3b2/0x750 [ 1290.577886] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1290.578275] ? lock_downgrade+0x6d0/0x6d0 [ 1290.578596] ? v9fs_show_options+0x690/0x690 [ 1290.578949] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1290.579334] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1290.579722] ? lock_is_held_type+0xd7/0x130 [ 1290.580065] v9fs_mount+0xb9/0xbd0 [ 1290.580338] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1290.580712] ? v9fs_statfs+0x4d0/0x4d0 [ 1290.581008] ? cap_capable+0x1eb/0x250 [ 1290.581306] ? v9fs_statfs+0x4d0/0x4d0 [ 1290.581604] legacy_get_tree+0x105/0x220 [ 1290.581925] vfs_get_tree+0x8e/0x300 [ 1290.582217] path_mount+0x1310/0x1e20 [ 1290.582518] ? kasan_quarantine_put+0x8b/0x1f0 [ 1290.582875] ? finish_automount+0x8d0/0x8d0 [ 1290.583213] ? putname+0xfe/0x140 [ 1290.583495] __x64_sys_mount+0x282/0x300 [ 1290.583811] ? path_mount+0x1e20/0x1e20 [ 1290.584137] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1290.584537] do_syscall_64+0x3b/0x90 [ 1290.584825] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1290.585216] RIP: 0033:0x7f4827e8ab19 [ 1290.585495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1290.586821] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1290.587383] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1290.587914] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1290.588445] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1290.588977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1290.589507] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1290.590047] [ 1290.633475] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1291.194703] audit: type=1326 audit(1661959691.372:117): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7579 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:28:24 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 81) 15:28:24 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x100000000000000) 15:28:24 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) 15:28:24 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TIOCPKT(r1, 0x80045440, 0x0) fcntl$setlease(r1, 0x400, 0x1) 15:28:24 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 15:28:24 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') r4 = accept$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000004c0)={0x2, 0x0, &(0x7f0000000480)=[r4]}, 0x1) sendmmsg$inet(r0, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000300), 0x3, &(0x7f0000000340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0xfffffffffffffefd, &(0x7f00000003c0)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="3c4d561ae720d054cc8d03da7553c018a969ac21f725523261afbaebd9e88715bbf45fb7b821101a26f411e5ed05f9150c048af35bfe08cf3ac088c8b08c917b78041198651b713528b73857e7", 0x4d}, {&(0x7f0000001580)="463db84f2f403364a154f63f672df395af15358c934fd0c26ca6bc15def1be4ffb882529e9c3bc57bccd40db68407f0e88ddb8208ccb08c42244a5ea3af142f02cfd07d4fb33", 0x46}, {&(0x7f0000001600)="819ac3be5a641ea1f2b0526b76532d518af13dafc8d1ad0d06ef156b2c303b9f00bf9b8d8150ae72edf279f03217f5fac9f6865cad5cdb969c55ff1f0fc897b0cf32a97daea6f03d375967d7d6ab6a6d75d8f6982426d7859189fdb1f9904b9f06ab30ab8934548ee2785d8e6857741515c8bcba12c1024db6b8ea5048bf74d6a69c93a86d7f60ce03b82eb36756894ebad8177c9541e8dfbd3ae30e8dbe161457c0df93358aa0fbbc796cfba25d", 0xae}], 0x4, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010101, @multicast1}}}], 0x20}}], 0x2, 0x4c891) close_range(r0, 0xffffffffffffffff, 0x0) 15:28:24 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x9, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:28:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 97) [ 1304.529403] audit: type=1326 audit(1661959704.707:118): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7614 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 [ 1304.568970] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:28:24 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 15:28:24 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0xa, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:28:24 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x6, r3}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:28:24 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x80045440, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2118806, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@access_any}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@access_client}, {@loose}, {@loose}, {@mmap}, {@privport}, {@noextend}, {@msize={'msize', 0x3d, 0x3}}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x03\\{(\''}}]}}) 15:28:24 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 82) 15:28:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 98) 15:28:24 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) [ 1304.774741] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1304.817064] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1304.818191] CPU: 1 PID: 7648 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1304.819436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1304.820945] Call Trace: [ 1304.821304] [ 1304.821615] dump_stack_lvl+0x8b/0xb3 [ 1304.822147] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1304.822877] p9_client_create+0xc85/0x1050 [ 1304.823466] ? p9_client_rpc+0xad0/0xad0 [ 1304.824032] ? lock_is_held_type+0xd7/0x130 [ 1304.824633] ? lockdep_init_map_type+0x21a/0x7e0 [ 1304.825297] ? __raw_spin_lock_init+0x36/0x110 [ 1304.825938] v9fs_session_init+0x1dd/0x1670 [ 1304.826557] ? lock_release+0x3b2/0x750 [ 1304.827130] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1304.827819] ? lock_downgrade+0x6d0/0x6d0 [ 1304.828413] ? v9fs_show_options+0x690/0x690 [ 1304.829047] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1304.829765] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1304.830480] ? lock_is_held_type+0xd7/0x130 [ 1304.831122] v9fs_mount+0xb9/0xbd0 [ 1304.831627] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1304.832343] ? v9fs_statfs+0x4d0/0x4d0 [ 1304.832900] ? cap_capable+0x1eb/0x250 [ 1304.833469] ? v9fs_statfs+0x4d0/0x4d0 [ 1304.834016] legacy_get_tree+0x105/0x220 [ 1304.834605] vfs_get_tree+0x8e/0x300 [ 1304.835132] path_mount+0x1310/0x1e20 [ 1304.835691] ? kasan_quarantine_put+0x8b/0x1f0 [ 1304.836371] ? finish_automount+0x8d0/0x8d0 [ 1304.836990] ? putname+0xfe/0x140 [ 1304.837509] __x64_sys_mount+0x282/0x300 [ 1304.837961] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1304.838078] ? path_mount+0x1e20/0x1e20 [ 1304.839654] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1304.840420] do_syscall_64+0x3b/0x90 [ 1304.840954] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1304.841679] RIP: 0033:0x7f4827e8ab19 [ 1304.842203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1304.844694] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1304.845738] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1304.846716] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1304.847693] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1304.848686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1304.849665] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1304.850668] [ 1304.851011] CPU: 0 PID: 7650 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1304.852141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1304.853716] Call Trace: [ 1304.854087] [ 1304.854411] dump_stack_lvl+0x8b/0xb3 [ 1304.854964] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1304.855723] p9_client_create+0xc85/0x1050 [ 1304.856354] ? p9_client_rpc+0xad0/0xad0 [ 1304.856933] ? lock_is_held_type+0xd7/0x130 [ 1304.857557] ? lockdep_init_map_type+0x21a/0x7e0 [ 1304.858241] ? __raw_spin_lock_init+0x36/0x110 [ 1304.858912] v9fs_session_init+0x1dd/0x1670 [ 1304.859554] ? lock_release+0x3b2/0x750 [ 1304.860126] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1304.860826] ? lock_downgrade+0x6d0/0x6d0 [ 1304.861434] ? v9fs_show_options+0x690/0x690 [ 1304.862075] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1304.862809] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1304.863537] ? lock_is_held_type+0xd7/0x130 [ 1304.864172] v9fs_mount+0xb9/0xbd0 [ 1304.864694] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1304.865380] ? v9fs_statfs+0x4d0/0x4d0 [ 1304.865946] ? cap_capable+0x1eb/0x250 [ 1304.866496] ? v9fs_statfs+0x4d0/0x4d0 [ 1304.867056] legacy_get_tree+0x105/0x220 [ 1304.867653] vfs_get_tree+0x8e/0x300 [ 1304.868203] path_mount+0x1310/0x1e20 [ 1304.868775] ? kasan_quarantine_put+0x8b/0x1f0 [ 1304.869445] ? finish_automount+0x8d0/0x8d0 [ 1304.870081] ? putname+0xfe/0x140 [ 1304.870609] __x64_sys_mount+0x282/0x300 [ 1304.871202] ? path_mount+0x1e20/0x1e20 [ 1304.871786] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1304.872558] do_syscall_64+0x3b/0x90 [ 1304.873095] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1304.873818] RIP: 0033:0x7f46087a4b19 [ 1304.874339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1304.876830] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1304.877890] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1304.878876] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1304.879852] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1304.880839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1304.881826] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1304.882850] [ 1305.334939] audit: type=1326 audit(1661959705.513:119): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7614 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:28:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x200000000000000) 15:28:45 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x80045440, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES16=r2], 0xfffffffffffffff3) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x2) 15:28:45 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @remote, 0x6}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="dbbead091d45969105d29b1de1402942df73c696427c9135fc3e32d2d70aa57925e191f3e1f4cf36fb0e7e3b01c12229c174e76865f292a7435a22208ee7c0c8d4a4f246186094343659f59ec23831c4d271aec04c84d9a77814f932bc73370a21074491a5e25bedd57203d3", 0x6c}], 0x1, &(0x7f00000001c0)=[{0xa8, 0x114, 0x6, "81d1174cf6b2b96c41acd8fd58dfa2f9c303026fa9303c13c5ba80a267f30f4b31e70ea912971c54771f99af68ee89e1afea818245149f6c6426c0b197153a49cfbd4d20002e256f42eaab9a6ff41814b5a23fb50f10a72c772ef0be2b164596ee7ef0674da2cc69c7debae661318bda0a7c5a70db0deac6798e7204acc8362939e8d1bc15246555a9621feb70c484696ff0"}, {0x48, 0x111, 0x6, "ccbb37cc60fe81689043a600dc12d2dc0c69430e03754d84d5f0c3e62b919ad5908f8a986e8c8850c275b75c51efae6d38d5a6dd56dbad71"}, {0x100, 0x10a, 0x1, "769d3c453bff0e9048dc0cd894b42c81f8ca8254530802ee9bed6ff8fb2882769395650a587f95be2e50251b59506f41864622c319d06a9aab227f057d8ab931aa2f4012271e6bc0e6d8110ff1a292f5b7c0be7984a017a0f6f265bc34f1e50fae265d698f19381125f67acd43e19446877ea2059fa91a8edc9cbd9f47cfc3fbbc7aba5bb14ef8ded178c6785f3b0424d1e4e0b6040222e394f053ab4c0bcbeb78032486af4991218f08223dd7cdb4be732c41556e38583c0308ea21cf3efddedde8d4a1b8d687bb5fdb6855350b44345264d1c3ef88f8e4305db01da20c20dd2bf01aa60016b66e999fad97"}, {0xf8, 0x114, 0x4, "ef7466fc57b3178178fbce26409b99d8c3a802afa19630098649f249395a267c285070bba3a31b1145627d37fc542c5dad7c137c7e62daf0f8b971a214a10b1aa2be7fa2388d814be21684e06842510191326e4f14c61ede1eee670325dfd45f4f2f935887d25c767b3a6dcbbaf135f8d821c2fe36f662164dd3e4202a31ac836bc5f4b2e3cb1e3fbeb1d9084fb952965cd4fa1d48959da0af65f5807ebdca5b7e34f19632461bc62f147003cbef5f179a3e370b10ed5ab5fa54cd28eda508f45e308df42ee3ee6fe2ee0743ea8f766f667eab45f395bb3e3215f3938b1356c8e72ee8"}, {0xf8, 0x103, 0x3, "c22a3c2bc44df83b6b03033dacb8366c7517db24a035132e209c0d0ee019b59941f14c0854ca105f779e8845fd643e17ff99353026f3dba2b9cefdc4bd155248bac3b6c0cf504dce7680287b897080ac4ad8014e70623f0e19386a808351e02e9df1ce8f591ad192e6fbb92089f4dbbc15b48c298327fa62d8b6d6ca958ca44861dee3f0980c9f311c8689f77404f0200df938e7730f32f7321fe58de1694a2a82b142419a161acd3c1c8e8045f7fbcc698abc3007f67a22c62056d159943592a5dc351c650d03a623e9adbce6d42e7c4f8f77b890319dc844df40c4a87b2a917dbe40"}, {0x80, 0x105, 0x2, "6da9488a3890fd421a68e53b647e3aef8fadee3c614fa6b8a7af4e69951885f36eacf7e7c54c20bfb4a1a48876ceefb6b0dcbc1cbfa8fdb4a9575005ed50cb820d5b0b077949880b5db4312eb59b6623e539dfd0d620f18f015b30d8c513321722e7153743bc9af12c01"}], 0x460}}], 0x1, 0x88c4) 15:28:45 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:28:45 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0xf, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:28:45 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) 15:28:45 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 83) 15:28:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 99) [ 1325.058987] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:28:45 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) write$P9_RLOPEN(r1, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x4, 0x1, 0x1}, 0x85}}, 0x18) [ 1325.067859] audit: type=1326 audit(1661959725.245:120): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7664 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:28:45 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x48, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:28:45 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f00000006c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x40}, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0xc) syz_io_uring_submit(r2, r4, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x4, 0x0, r6, &(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x1, 0x1000}, 0x400) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xff}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 15:28:45 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000000540)=[{&(0x7f0000000100)="d5139104b05f7e154e7e0c57a76f32e9fc4bc22b19b0958cf2d8af6c0f7e27d861dc98c3b6fad49b305bafb92e5d32ccc960612e21379b1bec098913195ddc906e2943b8dbf4f968c447327f7b31ae78a1afca4f0ba39b05bfb42e26d6b3c9647ef720bdb8b7bad05f475d53b03b8931cb59a6ae22ccc1c0b27577bf8319d7f53fbeaa6fbb77a9cbda", 0x89}, {&(0x7f00000001c0)="6cdf8518c6806891a975783d1bd4e5b4b87e49f60328f1bedbda7ecc76f3f8c2a901ef8021b12169c5741e86910030bbdb7433883974b39c05a26c1033e995efb8b69dc54008b387d909f1a81aec3a4562501ede9733db26cf6422cb5550ccf47b2a3532425ed1d2ad397ae7344d92b4c3d8ef883795b595cd7501fa4000b43501db4d368ea9b9c3bbf4179f158e6c4455409ffce117965d3110f0f348fb320d1f660fd8d305133092f4d2036d11cd741ba250513daddc35856070e9", 0xbc, 0xffffffff00000000}, {&(0x7f0000000280)="e3b4bc42f2f242343a844baa636bdefa263a550992ad35152831c3c6eabef77f6a888a88bfc0b5a5ed1b2df0cb04241c6723ea6221ba5283862f9cab49e250fe7c14c101473e8d912ae0e2396f7f24cb7fe79d6aef3e26239f1adde74a7155181d50f3cd3e1041cfdf410f1d3ebe0b77005367cda41fd845527276f67275617ddf5b9351463ef1f782531f9b6e57c90f0d26fe01830eb98050ea270708947c51a2564518e49a2d33bd1db0ae9cd26d0995aa7e60111becbb53468b91ba30f7e4a54b9fb1c0baaa5c02d7e003421f2a89aedae9ae838851bd", 0xd8, 0x7f}, {&(0x7f0000000380)="b743d4796630ccf995a1dba022863d92cc1291683cf68b3513dae5de9364a783d5bd4398319f7e767a0a667b8d1bb1ee3232c8999962751e36d00dd57d1b748718120475a12b5ced8a0e5b8aa0b9cb1b9ae33a42ed1de872b77b8e1eec3bbf37532d74763b172f14f559df6324d74967415bf381c3703b09cc90ad897b23c0d13f9ccb91c5f2f0871e12fda403280fe97d975021ef4bcb01aa9bb5cb608bcd38b2c8df8c2739b03b923020662dec0a49ba6746fab6058fb4ee32a5b335d831a0b79b763e9fe39e35096970fd0bbd6d107d30c4e55b8e25f5671e9f2ebe838f725a1f9ce7", 0xe4, 0x7}, {&(0x7f0000000480)="19f4a5aa81abee0bc1f3a3404bba8d7ec88327dd1187e4da579e758c029065075eed777ddbb41c65a0cfb6fdc174c0d70de281580f3f058c799c89883ff9ecca6d1529193c504abe3dd93153b47855589d0a37d475aa264968af28ceb974766f09b794b1d2b82802f7be9d5e6a0cf01e335da6ccfbad8fb63dafffeb5c8e59cce05b9a17f5bdb49d5d9828bc26e96c379b96fdbbfd24834ee6c3f8aac05476f418687549fa27492e79c6da1b214ae4fcbc9b82929774065610d69539e62e9a", 0xbf, 0x9}], 0x2052000, &(0x7f00000005c0)={[{@jqfmt_vfsold}, {@data_ordered}, {@jqfmt_vfsold}, {@errors_remount}, {@journal_checksum}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '^@*)'}}]}) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000640)=""/5, 0x5}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/131, 0x83}, {&(0x7f00000007c0)=""/39, 0x27}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/143, 0x8f}, {&(0x7f00000018c0)=""/45, 0x2d}], 0x8) 15:28:45 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) [ 1325.222065] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:28:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 100) 15:28:45 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 84) 15:28:45 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) [ 1325.340069] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1325.341188] CPU: 1 PID: 7699 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1325.342256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1325.343699] Call Trace: [ 1325.344052] [ 1325.344366] dump_stack_lvl+0x8b/0xb3 [ 1325.344906] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1325.345624] p9_client_create+0xc85/0x1050 [ 1325.346214] ? p9_client_rpc+0xad0/0xad0 [ 1325.346763] ? lock_is_held_type+0xd7/0x130 [ 1325.347354] ? lockdep_init_map_type+0x21a/0x7e0 [ 1325.348009] ? __raw_spin_lock_init+0x36/0x110 [ 1325.348666] v9fs_session_init+0x1dd/0x1670 [ 1325.349265] ? lock_release+0x3b2/0x750 [ 1325.349834] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1325.350500] ? lock_downgrade+0x6d0/0x6d0 [ 1325.351105] ? v9fs_show_options+0x690/0x690 [ 1325.351737] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1325.352420] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1325.353152] ? lock_is_held_type+0xd7/0x130 [ 1325.353754] v9fs_mount+0xb9/0xbd0 [ 1325.354272] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1325.354969] ? v9fs_statfs+0x4d0/0x4d0 [ 1325.355526] ? cap_capable+0x1eb/0x250 [ 1325.356073] ? v9fs_statfs+0x4d0/0x4d0 [ 1325.356644] legacy_get_tree+0x105/0x220 [ 1325.357241] vfs_get_tree+0x8e/0x300 [ 1325.357788] path_mount+0x1310/0x1e20 [ 1325.358344] ? kasan_quarantine_put+0x8b/0x1f0 [ 1325.359011] ? finish_automount+0x8d0/0x8d0 [ 1325.359605] ? putname+0xfe/0x140 [ 1325.360131] __x64_sys_mount+0x282/0x300 [ 1325.360724] ? path_mount+0x1e20/0x1e20 [ 1325.361299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1325.362043] do_syscall_64+0x3b/0x90 [ 1325.362584] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1325.363316] RIP: 0033:0x7f4827e8ab19 [ 1325.363817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1325.366289] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1325.367286] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1325.368270] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1325.369253] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1325.370236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1325.371214] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1325.372216] [ 1325.395736] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1325.396922] CPU: 1 PID: 7701 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1325.398046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1325.399554] Call Trace: [ 1325.399919] [ 1325.400237] dump_stack_lvl+0x8b/0xb3 [ 1325.400802] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1325.401620] p9_client_create+0xc85/0x1050 [ 1325.402299] ? p9_client_rpc+0xad0/0xad0 [ 1325.402948] ? lock_is_held_type+0xd7/0x130 [ 1325.403641] ? lockdep_init_map_type+0x21a/0x7e0 [ 1325.404403] ? __raw_spin_lock_init+0x36/0x110 [ 1325.405161] v9fs_session_init+0x1dd/0x1670 [ 1325.405857] ? lock_release+0x3b2/0x750 [ 1325.406494] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1325.407272] ? lock_downgrade+0x6d0/0x6d0 [ 1325.407939] ? v9fs_show_options+0x690/0x690 [ 1325.408639] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1325.409443] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1325.410227] ? lock_is_held_type+0xd7/0x130 [ 1325.410934] v9fs_mount+0xb9/0xbd0 [ 1325.411503] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1325.412246] ? v9fs_statfs+0x4d0/0x4d0 [ 1325.412880] ? cap_capable+0x1eb/0x250 [ 1325.413518] ? v9fs_statfs+0x4d0/0x4d0 [ 1325.414138] legacy_get_tree+0x105/0x220 [ 1325.414802] vfs_get_tree+0x8e/0x300 [ 1325.415420] path_mount+0x1310/0x1e20 [ 1325.416040] ? kasan_quarantine_put+0x8b/0x1f0 [ 1325.416796] ? finish_automount+0x8d0/0x8d0 [ 1325.417480] ? putname+0xfe/0x140 [ 1325.418068] __x64_sys_mount+0x282/0x300 [ 1325.418728] ? path_mount+0x1e20/0x1e20 [ 1325.419376] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1325.420204] do_syscall_64+0x3b/0x90 [ 1325.420806] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1325.421622] RIP: 0033:0x7f46087a4b19 [ 1325.422188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1325.424960] RSP: 002b:00007f4605d1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1325.426136] RAX: ffffffffffffffda RBX: 00007f46088b7f60 RCX: 00007f46087a4b19 [ 1325.427228] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1325.428328] RBP: 00007f4605d1a1d0 R08: 0000000020000240 R09: 0000000000000000 [ 1325.429426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1325.430505] R13: 00007ffeb48ca52f R14: 00007f4605d1a300 R15: 0000000000022000 [ 1325.431618] [ 1325.879686] audit: type=1326 audit(1661959726.057:121): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7664 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 [ 1339.591407] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1339.599922] audit: type=1326 audit(1661959739.778:122): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7709 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:28:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x400000000000000) 15:28:59 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:28:59 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x4c, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:28:59 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) close(r0) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:28:59 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000340), &(0x7f0000000380)=@md5={0x1, "ee9940901e7031359d668f00f0a1e699"}, 0x11, 0x4) r2 = clone3(&(0x7f0000000280)={0xd8d42695af2860be, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000300), {0x1c}, &(0x7f00000001c0)=""/184, 0xb8, &(0x7f00000003c0)=""/78, &(0x7f0000000180)=[r1, r1], 0x2}, 0x58) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x80045440, 0x0) write(r3, &(0x7f0000000440)="1bd45931832ed60d953ffd21438a9b12a8d0acd8753f91fef9ec1e8ad9aaa37148d65f603133060dfd038aaba8da56bacd8747c6f2ebcbbfd67166e51379b0c8917e", 0x42) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x6, 0x2, 0xc0, 0x1, 0x0, 0x80000000, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000000), 0x4ef23f317bca9209}, 0x40000, 0x7ac4de6f, 0x5, 0x0, 0x7, 0x1, 0x800, 0x0, 0x1000, 0x0, 0x11cb}, r2, 0x6, 0xffffffffffffffff, 0x2) 15:28:59 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x10000000) 15:28:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 85) 15:28:59 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:28:59 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x60, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:28:59 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1fffefff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1339.699454] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:28:59 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) 15:28:59 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x68, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1339.782129] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:28:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 86) 15:29:00 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x6c, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:29:00 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) 15:29:00 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 1339.890964] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1339.929343] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1339.930003] CPU: 1 PID: 7748 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1339.930600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1339.931427] Call Trace: [ 1339.931621] [ 1339.931798] dump_stack_lvl+0x8b/0xb3 [ 1339.932095] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1339.932497] p9_client_create+0xc85/0x1050 [ 1339.932832] ? p9_client_rpc+0xad0/0xad0 [ 1339.933137] ? lock_is_held_type+0xd7/0x130 [ 1339.933471] ? lockdep_init_map_type+0x21a/0x7e0 [ 1339.933839] ? __raw_spin_lock_init+0x36/0x110 [ 1339.934197] v9fs_session_init+0x1dd/0x1670 [ 1339.934528] ? lock_release+0x3b2/0x750 [ 1339.934831] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1339.935216] ? lock_downgrade+0x6d0/0x6d0 [ 1339.935545] ? v9fs_show_options+0x690/0x690 [ 1339.935879] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1339.936262] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1339.936678] ? lock_is_held_type+0xd7/0x130 [ 1339.937016] v9fs_mount+0xb9/0xbd0 [ 1339.937288] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1339.937657] ? v9fs_statfs+0x4d0/0x4d0 [ 1339.937951] ? cap_capable+0x1eb/0x250 [ 1339.938255] ? v9fs_statfs+0x4d0/0x4d0 [ 1339.938546] legacy_get_tree+0x105/0x220 [ 1339.938866] vfs_get_tree+0x8e/0x300 [ 1339.939161] path_mount+0x1310/0x1e20 [ 1339.939458] ? kasan_quarantine_put+0x8b/0x1f0 [ 1339.939834] ? finish_automount+0x8d0/0x8d0 [ 1339.940167] ? putname+0xfe/0x140 [ 1339.940449] __x64_sys_mount+0x282/0x300 [ 1339.940773] ? path_mount+0x1e20/0x1e20 [ 1339.941079] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1339.941481] do_syscall_64+0x3b/0x90 [ 1339.941766] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1339.942155] RIP: 0033:0x7f4827e8ab19 [ 1339.942436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1339.943764] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1339.944319] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1339.944854] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1339.945388] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1339.945908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1339.946434] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1339.946968] [ 1340.415207] audit: type=1326 audit(1661959740.593:123): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7709 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:29:12 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x74, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:29:12 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) 15:29:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1fffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:29:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 87) 15:29:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x500000000000000) 15:29:12 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 15:29:12 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) 15:29:12 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000003c0)={@local}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) accept4$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x80800) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@mcast1, 0x4e23, 0x40, 0x4e21, 0x5, 0xa, 0x747e324e1fc78ec0, 0x80, 0xc, r4, 0xee00}, {0x80, 0x7fff, 0x9, 0x9, 0xffffffff, 0x0, 0x100000000, 0x9}, {0xde, 0x7, 0x80000001, 0x718f8c27}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x4d3, 0xff}, 0xa, @in6=@private2, 0x3507, 0x6, 0x0, 0x1, 0xcfb, 0x81, 0xe86}}, 0xe8) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000300)={{0x2, @broadcast, 0x4e22, 0x1, 'rr\x00', 0x2, 0x792, 0x6d}, {@multicast1, 0x4e23, 0x10000, 0x41ac, 0x21c, 0xffffffff}}, 0x44) accept$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xe7, @remote, 0x1000}, 0x1c) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0xc, r4, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r6, 0x80045440, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000380)=0x5) [ 1352.433241] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1352.470335] audit: type=1326 audit(1661959752.648:124): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7763 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:29:12 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x7a, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:29:12 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) 15:29:12 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 15:29:12 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) [ 1352.542342] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:29:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:29:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 88) 15:29:12 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0xf750, 0x7, 0x81, 0x2}, {0x6, 0x2, 0x7f, 0x3}, {0x7, 0x5, 0x80, 0xdc3e}, {0x1, 0x1, 0x80, 0x100}, {0x1, 0x0, 0xbf, 0xa1}]}, 0x10) 15:29:12 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0xf0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:29:12 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) [ 1352.665537] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1352.693284] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1352.693858] CPU: 1 PID: 7796 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1352.694440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1352.695228] Call Trace: [ 1352.695421] [ 1352.695591] dump_stack_lvl+0x8b/0xb3 [ 1352.695885] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1352.696284] p9_client_create+0xc85/0x1050 [ 1352.696610] ? p9_client_rpc+0xad0/0xad0 [ 1352.696914] ? lock_is_held_type+0xd7/0x130 [ 1352.697238] ? lockdep_init_map_type+0x21a/0x7e0 [ 1352.697607] ? __raw_spin_lock_init+0x36/0x110 [ 1352.697954] v9fs_session_init+0x1dd/0x1670 [ 1352.698275] ? lock_release+0x3b2/0x750 [ 1352.698575] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1352.698944] ? lock_downgrade+0x6d0/0x6d0 [ 1352.699251] ? v9fs_show_options+0x690/0x690 [ 1352.699592] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1352.699966] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1352.700338] ? lock_is_held_type+0xd7/0x130 [ 1352.700662] v9fs_mount+0xb9/0xbd0 [ 1352.700973] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1352.701332] ? v9fs_statfs+0x4d0/0x4d0 [ 1352.701619] ? cap_capable+0x1eb/0x250 [ 1352.701918] ? v9fs_statfs+0x4d0/0x4d0 [ 1352.702201] legacy_get_tree+0x105/0x220 [ 1352.702514] vfs_get_tree+0x8e/0x300 [ 1352.702799] path_mount+0x1310/0x1e20 [ 1352.703104] ? kasan_quarantine_put+0x8b/0x1f0 [ 1352.703448] ? finish_automount+0x8d0/0x8d0 [ 1352.703781] ? putname+0xfe/0x140 [ 1352.704061] __x64_sys_mount+0x282/0x300 [ 1352.704377] ? path_mount+0x1e20/0x1e20 [ 1352.704691] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1352.705083] do_syscall_64+0x3b/0x90 [ 1352.705371] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1352.705751] RIP: 0033:0x7f4827e8ab19 [ 1352.706035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1352.707335] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1352.707903] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1352.708426] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1352.708976] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1352.709498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1352.710025] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1352.710574] 15:29:12 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) 15:29:12 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x680801) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x63}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) bind$802154_dgram(r3, &(0x7f00000001c0)={0x24, @none={0x0, 0x1}}, 0x14) symlinkat(&(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') 15:29:12 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x300, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1352.841098] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1353.285446] audit: type=1326 audit(1661959753.463:125): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7763 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:29:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x1800000000000000) 15:29:26 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) 15:29:26 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100902, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:29:26 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:29:26 executing program 4: r0 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x13) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0x1) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 15:29:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', &(0x7f00000001c0)={0x226200, 0x40, 0x19}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) copy_file_range(0xffffffffffffffff, 0x0, r5, &(0x7f0000000180)=0x3e, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r7, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e24, 0x8001, @remote, 0xc36e}, 0x1c) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x3}, 0x4) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:29:26 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 89) 15:29:26 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x500, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1366.602869] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1366.645469] audit: type=1326 audit(1661959766.823:126): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7819 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:29:26 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:29:26 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x57f, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:29:26 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 90) 15:29:26 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) 15:29:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100903, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1366.883851] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:29:27 executing program 4: r0 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x13) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0x1) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) [ 1366.927039] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1366.928106] CPU: 1 PID: 7846 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1366.929226] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1366.930695] Call Trace: [ 1366.931056] [ 1366.931371] dump_stack_lvl+0x8b/0xb3 [ 1366.931926] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1366.932656] p9_client_create+0xc85/0x1050 [ 1366.933271] ? p9_client_rpc+0xad0/0xad0 [ 1366.933823] ? lock_is_held_type+0xd7/0x130 [ 1366.934429] ? lockdep_init_map_type+0x21a/0x7e0 [ 1366.935102] ? __raw_spin_lock_init+0x36/0x110 [ 1366.935751] v9fs_session_init+0x1dd/0x1670 [ 1366.936365] ? lock_release+0x3b2/0x750 [ 1366.936914] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1366.937614] ? lock_downgrade+0x6d0/0x6d0 [ 1366.938217] ? v9fs_show_options+0x690/0x690 [ 1366.938846] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1366.939581] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1366.940295] ? lock_is_held_type+0xd7/0x130 [ 1366.940934] v9fs_mount+0xb9/0xbd0 [ 1366.941472] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1366.942182] ? v9fs_statfs+0x4d0/0x4d0 [ 1366.942748] ? cap_capable+0x1eb/0x250 [ 1366.943335] ? v9fs_statfs+0x4d0/0x4d0 [ 1366.943884] legacy_get_tree+0x105/0x220 [ 1366.944498] vfs_get_tree+0x8e/0x300 [ 1366.945053] path_mount+0x1310/0x1e20 [ 1366.945619] ? kasan_quarantine_put+0x8b/0x1f0 [ 1366.946275] ? finish_automount+0x8d0/0x8d0 [ 1366.946923] ? putname+0xfe/0x140 [ 1366.947450] __x64_sys_mount+0x282/0x300 [ 1366.948041] ? path_mount+0x1e20/0x1e20 [ 1366.948633] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1366.949415] do_syscall_64+0x3b/0x90 [ 1366.949965] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1366.950701] RIP: 0033:0x7f4827e8ab19 [ 1366.951229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1366.953762] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1366.954825] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1366.955832] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1366.956826] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1366.957831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1366.958832] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1366.959864] 15:29:27 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000100)=""/235, 0xeb, 0x40002000, &(0x7f0000000200)=@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6f73}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) [ 1367.458061] audit: type=1326 audit(1661959767.636:127): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7819 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:29:42 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r3 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}, 0x1c) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0xbc08, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 15:29:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x1a01000000000000) 15:29:42 executing program 4: r0 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x13) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0x1) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 15:29:42 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x600, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:29:42 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:29:42 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) 15:29:42 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100904, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:29:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 91) [ 1381.969019] audit: type=1326 audit(1661959782.147:128): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7865 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:29:42 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) syz_io_uring_setup(0x4d67, &(0x7f0000000100)={0x0, 0x1518, 0x2, 0x3, 0x12d}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)={0x2, 0x4, 0x8}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x5) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) [ 1382.003353] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:29:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 92) 15:29:42 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x700, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:29:42 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1) 15:29:42 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') r3 = accept$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000004c0)={0x2, 0x0, &(0x7f0000000480)=[r3]}, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000000)={'ip6gretap0\x00'}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0, 0x0, 0x0, 0x37}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:29:42 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) [ 1382.194238] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1382.774353] audit: type=1326 audit(1661959782.952:129): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7865 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:29:56 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 93) 15:29:56 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0x10001, {{0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001}}, 0x1, 0x8, [{{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001}}, {{0xa, 0x4e24, 0x8001, @mcast1, 0x20}}, {{0xa, 0x4e21, 0x6a7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x200}}, {{0xa, 0x4e22, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x20}, 0xb4f1}}, {{0xa, 0x4e23, 0x2, @mcast1, 0x2}}, {{0xa, 0x4e24, 0x5, @mcast1, 0x4}}, {{0xa, 0x4e23, 0x9, @mcast1, 0x7f}}, {{0xa, 0x4e24, 0xfffffffe, @loopback, 0x10000}}]}, 0x490) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:29:56 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100905, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:29:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x2000000000000000) 15:29:56 executing program 4: pipe2$9p(0x0, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x13) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0x1) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 15:29:56 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 15:29:56 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 15:29:56 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x900, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1395.885651] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1395.905979] audit: type=1326 audit(1661959796.084:130): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7914 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:29:56 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 15:29:56 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 94) 15:29:56 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 15:29:56 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0xa00, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1396.022446] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1396.023133] CPU: 0 PID: 7931 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1396.023746] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1396.024588] Call Trace: [ 1396.024792] [ 1396.024973] dump_stack_lvl+0x8b/0xb3 [ 1396.025280] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1396.025704] p9_client_create+0xc85/0x1050 [ 1396.026038] ? p9_client_rpc+0xad0/0xad0 [ 1396.026347] ? lock_is_held_type+0xd7/0x130 [ 1396.026690] ? lockdep_init_map_type+0x21a/0x7e0 [ 1396.027065] ? __raw_spin_lock_init+0x36/0x110 [ 1396.027433] v9fs_session_init+0x1dd/0x1670 [ 1396.027772] ? lock_release+0x3b2/0x750 [ 1396.028080] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1396.028461] ? lock_downgrade+0x6d0/0x6d0 [ 1396.028779] ? v9fs_show_options+0x690/0x690 [ 1396.029126] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1396.029528] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1396.029918] ? lock_is_held_type+0xd7/0x130 [ 1396.030256] v9fs_mount+0xb9/0xbd0 [ 1396.030527] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1396.030902] ? v9fs_statfs+0x4d0/0x4d0 [ 1396.031202] ? cap_capable+0x1eb/0x250 [ 1396.031511] ? v9fs_statfs+0x4d0/0x4d0 [ 1396.031809] legacy_get_tree+0x105/0x220 [ 1396.032128] vfs_get_tree+0x8e/0x300 [ 1396.032421] path_mount+0x1310/0x1e20 [ 1396.032725] ? kasan_quarantine_put+0x8b/0x1f0 [ 1396.033085] ? finish_automount+0x8d0/0x8d0 [ 1396.033430] ? putname+0xfe/0x140 [ 1396.033712] __x64_sys_mount+0x282/0x300 [ 1396.034024] ? path_mount+0x1e20/0x1e20 [ 1396.034337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1396.034735] do_syscall_64+0x3b/0x90 [ 1396.035018] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1396.035410] RIP: 0033:0x7f4827e8ab19 [ 1396.035697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1396.037042] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1396.037630] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1396.038177] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1396.038713] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1396.039265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1396.039802] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1396.040355] 15:29:56 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000002940)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f0000001340)=[{&(0x7f0000000100)="666aadf8066c5cc366f61702cd16ff2036b7695c6c5f07ab2d5fc599e57f5d312d5f18396aa4c9c6f1eaabc01c76c4b484a0b4cf0eb6c5ea7c516f7e5a29d9a3dcd00d5e380f8fb0c3f249a0b6aa70123b72221fac83aef16c5663db1f4b6fe73114f9b17c351966ae5b0d642aa42fb1d36aa6e43a15983f1f46326e1f41f6d8d33428030aa6dc75290ba424f5a8b5d3f5d157c14e853dcd3a218bd20fa5fdd0fbdf5002ab2394e2e5751db428ea25f49ded40015db5694cad7f855c6dfcf8b2cc8805218aecd9c10203a516742484b6c5d31a300472ce", 0xd7}, {&(0x7f0000000200)="bb3d8c04af9435adbb6e0e4b4422d96961160777c8f71c5c8198cadd43bf8234a426d0d87addaa07e8617076f592c8c1b53a62b84eeadcd29a1e5a18cfcbd352067e95430bfed1c7", 0x48}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000080)="97eb548ac2c31a16fea406044ec5ddb344d1fea2", 0x14}, {&(0x7f0000001280)="1bc31303", 0x4}, {&(0x7f00000012c0)="6ff930ed61a5e02a00eb43bf98293dfb473cf822d1f1e5644b64873d69dcd5c6f9f967a053da1d615389f43781ab8ad1386e365c03307ff7acf4e0edc4a4d0307b443ce2383f72fa955484e9ec5d68791afa93c54ed5059cd4ad8e76b89a11cda83b", 0x62}], 0x6}}, {{&(0x7f00000013c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002580)=[{&(0x7f0000001400)="89a3e06f5e377de02cfebfe75c37ac1ba0293a8f36394a908402dfeeefae34c08a5f029379eec8a90cb4e6e8a595625ed6be8398f10eaf3cbec8a0a11a013f6b5ecdd351603afdfea6a689ccd65220f4f89a72859116a03feb7354e7b2f4acbc582befdfc1fcdf0890c135c69ffd13d4cf50ad8440d54a314832dc1ebe8adf8f6b16c8bed3c21ceb521131283023cd6931ab", 0x92}, {&(0x7f00000014c0)="e82e5f1e79eb9f17591c93bd36a0f4243d60684152e588b661e52213764c0a5ce288655ec22f0252e546e3d5f46afe5fa9003fb287f39bc2aa0b588521c95ba5b8d78f7bdace56067e1a0f25d25fb21502fe91faa23593f95167f0ae22fcefdcda93435c7af8b5347a124cf0db4ef9324be4bcb2fa0cfeb4d5c97eac292defd377208125ff9a55fefb1ad6399c7b984765efa9997b5ac2edf5b0ab979da66bee2fd0656284", 0xa5}, {&(0x7f0000001580)="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", 0x1000}], 0x3, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"], 0x208}}, {{&(0x7f0000002800)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f00000028c0)=[{&(0x7f0000002840)="170a72f3a5e7806ee8a54c4c828450924b09240924a6231ff82367bef0bc45889b60c3410570f6c4e8796ad1cb8e9bffc19acc3922dba748b3a9d691108f043f18c83da007ceaf6be0a808ad8ba78a1bd52b8fab62c61925dfc4e9a5294dcff5490c", 0x62}], 0x1, &(0x7f0000002900)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x30}}], 0x4, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000002a40)='./file0\x00', 0x400000, 0x40) connect$inet6(r3, &(0x7f0000002a80)={0xa, 0x4e24, 0x618fe586, @empty, 0x2d}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000002ac0), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000025c0), 0x624402, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000002600)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x1, 0x0, 0x8, 0x0, 0x5}, 0x20) [ 1396.085226] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:29:56 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 15:29:56 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100906, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:29:56 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) [ 1396.720770] audit: type=1326 audit(1661959796.898:131): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7914 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:30:10 executing program 4: pipe2$9p(0x0, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x13) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0x1) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 15:30:10 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0xec0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:30:10 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 15:30:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 95) 15:30:10 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:30:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xd300000000000000) 15:30:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100907, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:30:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x9) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) [ 1410.000005] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1410.031807] audit: type=1326 audit(1661959810.210:132): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7960 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 [ 1410.033980] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1410.035214] CPU: 1 PID: 7959 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1410.035809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1410.036616] Call Trace: [ 1410.036806] [ 1410.036973] dump_stack_lvl+0x8b/0xb3 [ 1410.037260] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1410.037667] p9_client_create+0xc85/0x1050 [ 1410.038001] ? p9_client_rpc+0xad0/0xad0 [ 1410.038310] ? lock_is_held_type+0xd7/0x130 [ 1410.038638] ? lockdep_init_map_type+0x21a/0x7e0 [ 1410.038993] ? __raw_spin_lock_init+0x36/0x110 [ 1410.039342] v9fs_session_init+0x1dd/0x1670 [ 1410.039673] ? lock_release+0x3b2/0x750 [ 1410.039976] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1410.040347] ? lock_downgrade+0x6d0/0x6d0 [ 1410.040657] ? v9fs_show_options+0x690/0x690 [ 1410.040992] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1410.041369] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1410.041765] ? lock_is_held_type+0xd7/0x130 [ 1410.042101] v9fs_mount+0xb9/0xbd0 [ 1410.042380] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1410.042754] ? v9fs_statfs+0x4d0/0x4d0 [ 1410.043054] ? cap_capable+0x1eb/0x250 [ 1410.043358] ? v9fs_statfs+0x4d0/0x4d0 [ 1410.043655] legacy_get_tree+0x105/0x220 [ 1410.043972] vfs_get_tree+0x8e/0x300 [ 1410.044268] path_mount+0x1310/0x1e20 [ 1410.044572] ? kasan_quarantine_put+0x8b/0x1f0 [ 1410.044929] ? finish_automount+0x8d0/0x8d0 [ 1410.045266] ? putname+0xfe/0x140 [ 1410.045543] __x64_sys_mount+0x282/0x300 [ 1410.045867] ? path_mount+0x1e20/0x1e20 [ 1410.046180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1410.046576] do_syscall_64+0x3b/0x90 [ 1410.046862] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1410.047255] RIP: 0033:0x7f4827e8ab19 [ 1410.047542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1410.048881] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1410.049456] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1410.049995] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1410.050521] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1410.051053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1410.051589] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1410.052132] 15:30:10 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0xf00, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:30:10 executing program 4: pipe2$9p(0x0, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x13) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0x1) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) [ 1410.122295] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:30:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100908, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:30:10 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x4800, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1410.201873] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:30:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 96) 15:30:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100909, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:30:10 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) 15:30:10 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) [ 1410.313210] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1410.313817] CPU: 1 PID: 7989 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1410.314398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1410.315202] Call Trace: [ 1410.315392] [ 1410.315564] dump_stack_lvl+0x8b/0xb3 [ 1410.315851] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1410.316244] p9_client_create+0xc85/0x1050 [ 1410.316565] ? p9_client_rpc+0xad0/0xad0 [ 1410.316869] ? lock_is_held_type+0xd7/0x130 [ 1410.317189] ? lockdep_init_map_type+0x21a/0x7e0 [ 1410.317546] ? __raw_spin_lock_init+0x36/0x110 [ 1410.317899] v9fs_session_init+0x1dd/0x1670 [ 1410.318217] ? lock_release+0x3b2/0x750 [ 1410.318510] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1410.318886] ? lock_downgrade+0x6d0/0x6d0 [ 1410.319196] ? v9fs_show_options+0x690/0x690 [ 1410.319525] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1410.319900] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1410.320277] ? lock_is_held_type+0xd7/0x130 [ 1410.320602] v9fs_mount+0xb9/0xbd0 [ 1410.320866] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1410.321221] ? v9fs_statfs+0x4d0/0x4d0 [ 1410.321524] ? cap_capable+0x1eb/0x250 [ 1410.321835] ? v9fs_statfs+0x4d0/0x4d0 [ 1410.322119] legacy_get_tree+0x105/0x220 [ 1410.322426] vfs_get_tree+0x8e/0x300 [ 1410.322708] path_mount+0x1310/0x1e20 [ 1410.322998] ? kasan_quarantine_put+0x8b/0x1f0 [ 1410.323341] ? finish_automount+0x8d0/0x8d0 [ 1410.323663] ? putname+0xfe/0x140 [ 1410.323930] __x64_sys_mount+0x282/0x300 [ 1410.324246] ? path_mount+0x1e20/0x1e20 [ 1410.324543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1410.324920] do_syscall_64+0x3b/0x90 [ 1410.325191] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1410.325591] RIP: 0033:0x7f4827e8ab19 [ 1410.325861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1410.327129] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1410.327670] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1410.328174] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1410.328680] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1410.329205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1410.329717] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1410.330235] [ 1410.865426] audit: type=1326 audit(1661959811.043:133): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7960 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:30:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xf6ffffff00000000) 15:30:23 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x4c00, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:30:23 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') r4 = accept$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000100)={0x91, {{0xa, 0x4e23, 0x4, @empty, 0x20}}, {{0xa, 0x4e20, 0x6, @mcast2, 0x1}}}, 0x108) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000240)={r6, 0x1, 0x6, @random="662f79549ffb"}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 15:30:23 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:30:23 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 15:30:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2010090a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:30:23 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 97) 15:30:23 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) [ 1423.113433] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1423.132671] audit: type=1326 audit(1661959823.310:134): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8002 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:30:23 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 15:30:23 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x6000, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:30:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2010090b, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1423.219969] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:30:23 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 98) 15:30:23 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = dup(r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private2, 0x17, 0x1, 0x1, 0x1, 0x7fff, 0xfff7}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x80045440, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0xfd) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r2, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) accept$packet(r6, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101, 0x3, 0x3, 0x0, 0x7f, 0x4}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x7, &(0x7f0000000140)=0xb20, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 15:30:23 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 15:30:23 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:30:23 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x6800, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1423.316194] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1423.316821] CPU: 1 PID: 8029 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1423.317434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1423.318301] Call Trace: [ 1423.318499] [ 1423.318676] dump_stack_lvl+0x8b/0xb3 [ 1423.318990] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1423.319407] p9_client_create+0xc85/0x1050 [ 1423.319748] ? p9_client_rpc+0xad0/0xad0 [ 1423.320070] ? lock_is_held_type+0xd7/0x130 [ 1423.320421] ? lockdep_init_map_type+0x21a/0x7e0 [ 1423.320809] ? __raw_spin_lock_init+0x36/0x110 [ 1423.321173] v9fs_session_init+0x1dd/0x1670 [ 1423.321511] ? lock_release+0x3b2/0x750 [ 1423.321828] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1423.322218] ? lock_downgrade+0x6d0/0x6d0 [ 1423.322536] ? v9fs_show_options+0x690/0x690 [ 1423.322879] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1423.323277] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1423.323678] ? lock_is_held_type+0xd7/0x130 [ 1423.324024] v9fs_mount+0xb9/0xbd0 [ 1423.324308] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1423.324686] ? v9fs_statfs+0x4d0/0x4d0 [ 1423.324985] ? cap_capable+0x1eb/0x250 [ 1423.325298] ? v9fs_statfs+0x4d0/0x4d0 [ 1423.325604] legacy_get_tree+0x105/0x220 [ 1423.325934] vfs_get_tree+0x8e/0x300 [ 1423.326234] path_mount+0x1310/0x1e20 [ 1423.326532] ? kasan_quarantine_put+0x8b/0x1f0 [ 1423.326891] ? finish_automount+0x8d0/0x8d0 [ 1423.327237] ? putname+0xfe/0x140 [ 1423.327521] __x64_sys_mount+0x282/0x300 [ 1423.327836] ? path_mount+0x1e20/0x1e20 [ 1423.328144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1423.328552] do_syscall_64+0x3b/0x90 [ 1423.328843] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1423.329233] RIP: 0033:0x7f4827e8ab19 [ 1423.329519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1423.330887] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1423.331448] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1423.331981] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100900 [ 1423.332505] RBP: 00007f48254001d0 R08: 0000000020000240 R09: 0000000000000000 [ 1423.333034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1423.333567] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1423.334113] [ 1423.356239] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1423.941227] audit: type=1326 audit(1661959824.119:135): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8002 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:30:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 99) 15:30:38 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 15:30:38 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:30:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xfeffffff00000000) 15:30:38 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="566de3595ecfa79b312d8cf7b82febc8a95d4d317cc85ab7023049fedd5d3491b415c31ba7d79caa09dbec01dccb6b99082633235af5276bb6249aed575e96c0e7166b375c13fe0a3e16a5e6cfe949066895c24c6fc7912cc9fdd25fe060e5a54871fd0f8d24dcbdf3d9e1690498642dd34fe1d8b500955d788c6e7b1d61c423cbeecd45a3c5d74e77e0dfe251c1e50e8f3b41208d8e07f89a39e85a7bddccb0874ae2bae66251cb6c0879ab5b086c982962d76e269334d6e37b65a2ec519eb91df4765d09b51987bcc6d045806300fde6ff005318ef6e5decad1986a4845ded811807f80df6ad6753dc33a4da45d49d3ef2867c0e4c0489", 0xf8}, {&(0x7f0000000080)="58a4ea6478fa9c5974b855f4c4e92ff04f16", 0x12}], 0x2, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_retopts={{0x50, 0x0, 0x7, {[@cipso={0x86, 0x27, 0x3, [{0x7, 0x12, "62be32f23f3085c77cdbc86b1b687b0b"}, {0x1, 0x5, "46afc5"}, {0x7, 0xa, "01206fa4851409b2"}]}, @end, @ssrr={0x89, 0xf, 0xc6, [@multicast2, @multicast2, @private=0xa010101]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}], 0x68}, 0x8000) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:30:38 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100910, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:30:38 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 15:30:38 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x6c00, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1438.297047] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1438.319341] audit: type=1326 audit(1661959838.497:136): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8053 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:30:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 100) 15:30:38 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x80045440, 0x0) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @private}, &(0x7f0000000440)=0x10, 0x4bb0f344c2097826) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000500)=0x6e, 0x80000) r6 = socket$packet(0x11, 0x2, 0x300) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r7, 0x80045440, 0x0) r8 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r12, @ANYRES32=r8, @ANYRES32=r11, @ANYRESHEX=r10, @ANYRES64, @ANYRESOCT, @ANYRES64=r9, @ANYRES32, @ANYRESOCT]) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000140)={0x44, 0x3f, 0x400, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="0194550a51dedc0a00e94abbc480076c78b952b69949e62fc5", @nested={0x10, 0x9, 0x0, 0x1, [@typed={0xc, 0x35, 0x0, 0x0, @u64=0x20}]}]}, 0x44}], 0x1, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r11}}}], 0x130, 0x10}, 0x10) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') setsockopt$inet6_IPV6_RTHDR(r13, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x89, 0x0, [@mcast1, @loopback]}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) 15:30:38 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x7400, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:30:38 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 1438.453473] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:30:38 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 15:30:38 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x7a00, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:30:38 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x201009a3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:30:38 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) [ 1438.555285] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1439.133866] audit: type=1326 audit(1661959839.311:137): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8053 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:30:53 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xffffffff00000000) 15:30:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x201009c5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:30:53 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 15:30:53 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x7f05, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:30:53 executing program 0: socket$inet6(0xa, 0x801, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r0, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x80045440, 0x0) close_range(r2, r0, 0x0) 15:30:53 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 15:30:53 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:30:53 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) [ 1453.468206] audit: type=1326 audit(1661959853.646:138): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8098 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 [ 1453.478842] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:30:53 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 15:30:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x201009dc, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:30:53 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:30:53 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0xc00e, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:30:53 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 15:30:53 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1fffefff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:30:53 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) connect$inet6(r1, &(0x7f00000018c0)={0xa, 0x4e21, 0x3, @private1, 0x803f2aa4}, 0x1c) getsockname(r2, &(0x7f0000001740)=@can={0x1d, 0x0}, &(0x7f00000017c0)=0x80) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @broadcast}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000039c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1ff, @loopback, 0xda}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="4b1ae6ddce51d9493d8e6a9a78dcbabdf325e8fc1de30968a6330637a284efcd052d044cf490e8aa9d9834c30c8047efda8808b3de99dd9d544ed469d585ec8fc83c2e6576d497ec225279046b5fdf0e2c2f4d27cb026b83b833c3a33d130e13bda55738a1746d5f0127a03df76c388f8fc546cbf35391a4bb03d76ca3502617b8c94a08ed6ea8cb451a6bd2033fc97170da9ee779a52027cc06ffd2cf9ffc2af3edd7e9e22eead01ae1793a0b1637f28b6b46b5cc069b556bf8a702fc6791b888f05ec5a026a9eb62783ff2932c032ad514", 0xd2}, {&(0x7f0000000200)="be3c5568665c1bd5d518e2ae6d60801edc46fe6b583b0d6e6e3af1f2aa33d37c47629b7fb05913796c5818f12af563c0ba106c86886892a3fd72acf783a3602ab7db3a59bb02f251222eb2768cdffd6d9eefa808bf99a706e7a069f37925b0245ca451475fcac0aca0482a1fbf6045e92a74459af459712950805990bd63d9d9be6c3b0fe157d115b886bdc205eef684bc6fd54f4cf31f1da895ae0672863753484da6068ec18f75483f212a7eb8c0504a632c94919baec08104eb6b3c094bf5de7e3b86", 0xc4}, {&(0x7f0000000300)="206aaccfdf2d905d0c870606c4d06e2eda5e001be6df5d9aef6b10db0b135a582dcfb5425f2c5c8f20ea0cc9e4fd02ad56e33459ae6e804c8c78fe8182f3780c5f355f5e9d326794f035b7e6f37c00e3f205dfc925c7ad251f85301e53aed801f895021596cd970d9f", 0x69}, {&(0x7f0000000380)="d2c2bc18630de2f5aa3882c5b23e7185ccb49ac395c4ffb4fdd52d36ebf1254eafdfa3b6b62b85a716a3f79597c3db4e34385cd72e684341751f36628e142303776c81758d51ddd79873414862a15b340dbe45a1862b23cb73769a312a", 0x5d}, {&(0x7f0000000400)="c97a7bd0adcf7679e2aa020bda8d251609558496a40d769bdc0abe7bc83cf3eb3e3a52ce10bd3719a9333296592de7b77a68fa7134ad11cd2899a1801f8dcaa18e00d733c80079d9ff2c555c60770abe398874ac42e871bdc13e17ff0e5dcb1102ab5152c5655e4508a5f750e3b28fc8ccbc69a5fe7dfaed23f9776ebb3444439ceec67c4c29a7cf383b1ae139115d83ecf34fd083ee30d2b7fdb08f540a564a00cde8e3172f878e80", 0xa9}], 0x5}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="557ac4b97ff5c56be509fe22eb5c2ad3fd0ca62ef099efd5c934def1f427478eb50cfb798cce0d341476231672dec146a77045cb46685935eca8f3b2aaf0b0a2b4d17ffae1e669ce028dd60203720ee2bd7651e89ef8d81b4f17d6c5e805ed6165cc6cccf2dc82ec06c1a86faac9352ed6a3fd8a7d44776a1501bbe3d76d8d3a4a09fbfe6f59e757d90a781cc0ce7382acd3d923c2b406a18a8b737b3e8cc8da82e6d1ecec4fbd3bdeed23d919d04d590b2da79254d797783048756b485c03d19fc43bc69a048789c3c066489a46de2359686b2a27026965292d446c", 0xdc}, {&(0x7f0000000640)="ca176457e6e7f8f986fdc9992668401721545a22292e830a16b21497a0fb64e5615d5b2515b2cd72e7badd6da34f210344d957271b9cb44e74da66568a9ae9deacc7751906634ff78d0730c9ce27ab0d3a0bb6f0ed7e6b9733fcc19c439ca2fd15f580713d61497def0384b692bc1b4d", 0x70}], 0x2, &(0x7f00000006c0)=[@hopopts_2292={{0x58, 0x29, 0x36, {0x32, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x10001}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @enc_lim={0x4, 0x1, 0xff}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0x9, [0x4]}}]}}}], 0x58}}, {{&(0x7f0000000740)={0xa, 0x4e23, 0x7f, @mcast2, 0x7}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000780)="52dabd1b038041f1745f4fe57f7a1725bc9d2f46359154feb67f", 0x1a}, {&(0x7f00000007c0)="a0e6e0f9fd673ee657af90c44c9fcb737383efc33da73b47420cf2924b84d21e30bcf656c07582fe588c53da9fd738cf91ffcaad64f917dbffcbef9820e760d2f8b35325fa9e73fe51a9c8066411a041cc54c914a6fdc675e80dafadeb7b11127a8db22e5055dee9d00042fd269996a1726d51d411bfde2d7b9a8df2652f0b1f30c9211203df842ffa2e5a8673dcae3d4e31ac51f14ef2edfde2dd63886de8d7fecd86e9cbcd1bf7a3fd2a2a69d8cd30c11d05a73ee66b48f4e73d8529809d737609cf6e42eafe9c09", 0xc9}, {&(0x7f00000008c0)="0ff105ac980fb315c91ff4ccc0dbabfdc2934bf772957dfd0e3aa79e25d626c6606eb91a330da21c554ccbfec0f693da13582701cf92eeeaa5a31da89b5ec1caa95b3e4fd0618e4fa3c69d6cbcfaac1a4290163588743ed29baa3476924b07f001a46b2af73b3412168fe905aa2b65779c53deda5a1d7246ecf0c1f25ee59ddc8570", 0x82}, {&(0x7f0000000980)="e6d62d3ecaebcd0a7f515a5b3ca8187215c9355c03019815ac487647ef029ad63af4fac897340143396c6d242802fcca9fb2bd214b30a944e0f274d95e29921df963487a43f7a684555083b4f7e7c4ef63c94d4d5534544a5808f21656dfd092dc3b2938ecd160d0fb2446c61e27410a2774904228c4180f6a0043e979782a7ba6d29e95eef839a7bf9a2a017a8839a859acf7b16b1c09c1404ce95e0b113bfaf74c10b92a882a0496c00ace244ace22", 0xb0}], 0x4}}, {{&(0x7f0000000a80)={0xa, 0x4e23, 0xb3a, @local, 0x4}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000000ac0)="dfceb8ce8229df08d2ef75d70c031603bfd3d888ca971b3a1e5ec98f404dd5ebf5118d0ed0329369469ca0c5c782d358f17fda0f75332653465c9c1c98e739448291dfd3947db1437c9a439dfa27af1b9b61d807dc974b43a4073f94fa1a0e3356cd90b4704b958c8d97130b445df894fc954c16b639262f743378135b3a302145701f5de6ee4149504d5cb5945438b319b977704a14cb1c61fa05f36e2769595d440a8b7f16d6a16113f84adf5dc099af5bfc8550215540b39c5c6573f599a9f39db8d67e1a1ef26702450e07afb8d76b55ab9d45a358", 0xd7}, {&(0x7f0000000bc0)="a3d55647e2100981e017ddd5222c272ec12ae29b550bec285e9e12c912398dd29e5afb25267b07c1ba239a9f5101652527f0d5c8cf77e793e382ed76f69fe37eed386b58fa89983dd1e7c272364111442529fdfa6808f8972ee25b9c305460d976b41eef83a3eadf697fb392dbc1b108264678d73709a611e1839a32e96e3d29b5852e105c3790d93374b2110edd8fabf840396544056e8adfa744595040b8", 0x9f}, {&(0x7f0000000c80)="5f233752b16edc3907782b8414110ffe8300d6e1081c9d5d28d2bb4cc9a2a8b7f13d6daac8e3efd3734bace0c9a9704de370c24094513fd322b41819dacd811d73e15a8b3861181ed180ca9a20a51136c49c87b6a256e5331976c1a347b885fa05ee74a73b34a2f8f279f7a372f491ba2c361874ed44ab1803ae36f3274c74884909dd5f3360b8a0c6d6e121a48e1688d4744fa122da60501292d8f9c00050286a5e0277d1938a94ed0a80b8df3067", 0xaf}, {&(0x7f0000000d40)="94f580e44d8b114b9c3ad8d24ef34e48c88ac058c38caca042c66d9154fe6623ec75efcb900a34aa4dc46692ece96858ae16d85fdf64ac793abc5db301c28945131c0b6861fe0cce4c2c3c583a388d0e503917fb99afdad8c397dc58b9d632337b29d18b7e516c2dcb72e0b02ea8e6bd455972e7f032dbd91538e70d3f", 0x7d}, {&(0x7f0000000dc0)="58080ca1eacb6bbe8f50e8083e6a67f2a4180d2506af1fb840a5b1edd8c57a6b7556208577cf57f7af3fce99b96c70f4becd27c2b4cc225bbf11f0a46e1a4f3da18e61b2a4ed0cbe96589d77e800e2959076b9f7cf2a2ed9509706209753e509a28cbb30e609c11c1794be00f48a7e6d1d433fdbb0de6a318540fb060e57d822356dcd7c31d03846236d578306be93268e9d7660fb2a613477c46899fc318fa4", 0xa0}, {&(0x7f0000000e80)="1ef7d656bed9d0980cec4f238c9ff337aaee2aa985abb2ea8d82c2b237cf95a9bbe1cddba2191e3a4aeb6d1a84ceac59dc502470430f5d7161823832f61748d146def54b0b2c2471530cd7c5b5d666093a0b31e448ef7c7a07f7a77f1dc7eb6a546a8b64c44753619c936db23bd8e9e23f169ddd799c1efbe04877cfacf712a3eccd4b0970f8f999c09d38e8b2be27c4fdbe7f47827cc451de973d6d47d5c6eac420dc9edda788b3985b5f57bde86a71508618", 0xb3}, {&(0x7f0000000f40)="5f020ec5cc71a4d524c7f8cbf2df46f32a64873d0a354094dbedd44eb7898cb7373acf37b8270624c09a240fc9542bd4cdf9800113454dca70a27075244a30ea9562e93e32f4ab9b7be12179ffd997279f10dd21453b6d0487146cbfbead38e07d5eaf95c0c3732ec2cd97fa01bd827e6cb33ab5ec20b4afa0293450cfd75c5bf94fa2962feaaf794f90a76862700c7de72fc055d181fb81d7a195d38b968e", 0x9f}, {&(0x7f0000001000)="c55273fbb12bc53299453fdc310c560e67f15fff2d339f4b4ab817049f81a506635e1cb2c658e452443e236b29a6d9773619d68520e50f0e3d9ca723cc07d4515296cf6b64dc8fb2434e2bad13f45d757f867dfab2a048aedaf7fbb6b3168f95f33a3a00b0c5f40c5b1cf2d7c909876840782dbe15bde249cea8ebaa1feca4183d4db876ab96b56065a4a6af39cb85d0f43ba8ace5d34c824ef13124143dc471679a5151e7db2b23475e82e2e089880d4ae920c784", 0xb5}, {&(0x7f00000010c0)="b14ca7d9292e2ebfa831074fddf9bfb7fb7581dac4cd9e7e5239132ee1b76d9e7d76653242c37973c1928d0f56217d1d5a048916fbc9b27d55602a55784cf0af8cd2c996e8d1e6812cf1e475d4af34f5986b294a6f5e6aa6a11575009ba5626f21c4efc488e4f7e39129a397cec3dd5b2d1794", 0x73}], 0x9}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001200)="79a08172b1c0a269ae667a87173afa6f4ccd9c69b755ed33e7b250f079285e2a5c8541cbe5cabe7533739c906f646c27069ac19e0a9c19655cc0fe06782b2861ed76d899a73422f8f96b74e70568b0b747d9b62861ce1619b15ba2188565b676366a34d25bb21fe4eb282bfd1d636831a9ef82acbe11a22b8f0fcb9df05ccdc7f10e39524c7caa5f973c81408c96d3175ac49ca8e94d3ea32beecd5493b6fcb36648e3b8e79405b2ff0d91fb076db60b611953a15192ad47cb910610bcfa74d4d8dad9c7c4ed937e4eb901912b9bbb88", 0xd0}, {&(0x7f0000001300)="f42d12298bab60bd87e1c4a3722c51795bc4a0b55618612aedbd1a3b62d9e92e5d72fa6a22827242f59732997d4a57476fed11abfdeff015170e5e8722bb281ad002592904d9bbe362b6d78fcbf0474e730a4c2878c97684eaa63e7ad2250db007fd7f10fd516480f29fd656cc2633ce61e95455306afb41a30ddb8a4514b3cebdebec73456423124d5f3b82873d68bfc5379e6bbe3d7e63776ad8fb85e19b46c4859f014a92ff1d88739ceae52c5b90ca5b98089de142255a32e39707c7a1d42e5ea8989c37604509a8cc0f00d670827ff2b8f5294e4bdb726dd103b42912df99194d38ab6138d917ccfba95eb746ed9f", 0xf1}, {&(0x7f0000001400)="df6bdfceca812494c626bfb505ea0b4b16612f428a9e7684dc50d9f84567df5ed065d58feb468af5abc10a4b3913bf153631dc2ec86b10534f91baa19cfcf070cf54c535bc6859c4268da079c48d47153413ebb9c79464bfb17833750b808f2bf29ac18ccae4e3c97441c5f78369a3b752c239d5ee914853f0d2c1b212771e44ffc2da", 0x83}, {&(0x7f00000014c0)="3000f964f5f7abbc176ce9ea88bafd9400ab03e69525807e8d5521acdeaa298759aacf54dad1761b24d253718d6fdca0c902570b23662c8f431434bd2e8f8deddfc3f080eef99b6774fe645ddf499e865b44847da03b7b6380a19208ab484a71598457d98c98e34e09d2a685f06461d723473a1f5ee43b4b383224d48d36f67a342d524e3af3abb0c5cb12ee377cbe274eeb86d45f110282956ae352e26fcf20718ddfa0ed82e292a5828abf322922a1423d5bf3a4c333cd19721444c3d73636211bb569e45bf22eaa373c605ad5f1b6dd2e9c016667", 0xd6}, {&(0x7f00000015c0)="c664ee147ce46250ec14886928a31da91bd65358496e8e8855f6c6ba21bc231f", 0x20}, {&(0x7f0000001600)="ed269208cdab2cda011f250de140c67105cfe1a96fae4a51ab64e4bc67145cd900a0c85b1b22662c006628d9a7922fdc9041610117249b16a24edcc3449d9bc9f578151b1a9b2865bb2a64ac9f4165993e212e6443acea244e4fe3f0bda468609e83567910a158384c5d2668d6c605b61af8a786f4e0c2bf9851d082b9c70f25e868cf39d3a929d666226ada4d83c423f216a993651959aede054e44b863ad551492afa2bf56b228a88e6faa1b32a24397eb189b", 0xb4}], 0x6, &(0x7f0000001800)=[@hoplimit={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r3}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dontfrag={{0x14, 0x29, 0x3e, 0x40}}], 0x70}}, {{&(0x7f0000001880)={0xa, 0x4e24, 0xfff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x8001}, 0x1c, &(0x7f0000003900)=[{&(0x7f00000018c0)}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="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", 0x1000}], 0x3, &(0x7f0000003940)=[@rthdr={{0x28, 0x29, 0x39, {0xa6926b78151a853a, 0x2, 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x21}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r5}}}], 0x50}}], 0x6, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) [ 1453.714165] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1454.295153] audit: type=1326 audit(1661959854.473:139): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8098 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:31:07 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x0, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:31:07 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0xf000, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:31:07 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1fffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:31:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20101400, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:31:07 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 15:31:07 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 15:31:07 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) connect$inet6(r1, &(0x7f00000018c0)={0xa, 0x4e21, 0x3, @private1, 0x803f2aa4}, 0x1c) getsockname(r2, &(0x7f0000001740)=@can={0x1d, 0x0}, &(0x7f00000017c0)=0x80) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @broadcast}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000039c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1ff, @loopback, 0xda}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="4b1ae6ddce51d9493d8e6a9a78dcbabdf325e8fc1de30968a6330637a284efcd052d044cf490e8aa9d9834c30c8047efda8808b3de99dd9d544ed469d585ec8fc83c2e6576d497ec225279046b5fdf0e2c2f4d27cb026b83b833c3a33d130e13bda55738a1746d5f0127a03df76c388f8fc546cbf35391a4bb03d76ca3502617b8c94a08ed6ea8cb451a6bd2033fc97170da9ee779a52027cc06ffd2cf9ffc2af3edd7e9e22eead01ae1793a0b1637f28b6b46b5cc069b556bf8a702fc6791b888f05ec5a026a9eb62783ff2932c032ad514", 0xd2}, {&(0x7f0000000200)="be3c5568665c1bd5d518e2ae6d60801edc46fe6b583b0d6e6e3af1f2aa33d37c47629b7fb05913796c5818f12af563c0ba106c86886892a3fd72acf783a3602ab7db3a59bb02f251222eb2768cdffd6d9eefa808bf99a706e7a069f37925b0245ca451475fcac0aca0482a1fbf6045e92a74459af459712950805990bd63d9d9be6c3b0fe157d115b886bdc205eef684bc6fd54f4cf31f1da895ae0672863753484da6068ec18f75483f212a7eb8c0504a632c94919baec08104eb6b3c094bf5de7e3b86", 0xc4}, {&(0x7f0000000300)="206aaccfdf2d905d0c870606c4d06e2eda5e001be6df5d9aef6b10db0b135a582dcfb5425f2c5c8f20ea0cc9e4fd02ad56e33459ae6e804c8c78fe8182f3780c5f355f5e9d326794f035b7e6f37c00e3f205dfc925c7ad251f85301e53aed801f895021596cd970d9f", 0x69}, {&(0x7f0000000380)="d2c2bc18630de2f5aa3882c5b23e7185ccb49ac395c4ffb4fdd52d36ebf1254eafdfa3b6b62b85a716a3f79597c3db4e34385cd72e684341751f36628e142303776c81758d51ddd79873414862a15b340dbe45a1862b23cb73769a312a", 0x5d}, {&(0x7f0000000400)="c97a7bd0adcf7679e2aa020bda8d251609558496a40d769bdc0abe7bc83cf3eb3e3a52ce10bd3719a9333296592de7b77a68fa7134ad11cd2899a1801f8dcaa18e00d733c80079d9ff2c555c60770abe398874ac42e871bdc13e17ff0e5dcb1102ab5152c5655e4508a5f750e3b28fc8ccbc69a5fe7dfaed23f9776ebb3444439ceec67c4c29a7cf383b1ae139115d83ecf34fd083ee30d2b7fdb08f540a564a00cde8e3172f878e80", 0xa9}], 0x5}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="557ac4b97ff5c56be509fe22eb5c2ad3fd0ca62ef099efd5c934def1f427478eb50cfb798cce0d341476231672dec146a77045cb46685935eca8f3b2aaf0b0a2b4d17ffae1e669ce028dd60203720ee2bd7651e89ef8d81b4f17d6c5e805ed6165cc6cccf2dc82ec06c1a86faac9352ed6a3fd8a7d44776a1501bbe3d76d8d3a4a09fbfe6f59e757d90a781cc0ce7382acd3d923c2b406a18a8b737b3e8cc8da82e6d1ecec4fbd3bdeed23d919d04d590b2da79254d797783048756b485c03d19fc43bc69a048789c3c066489a46de2359686b2a27026965292d446c", 0xdc}, {&(0x7f0000000640)="ca176457e6e7f8f986fdc9992668401721545a22292e830a16b21497a0fb64e5615d5b2515b2cd72e7badd6da34f210344d957271b9cb44e74da66568a9ae9deacc7751906634ff78d0730c9ce27ab0d3a0bb6f0ed7e6b9733fcc19c439ca2fd15f580713d61497def0384b692bc1b4d", 0x70}], 0x2, &(0x7f00000006c0)=[@hopopts_2292={{0x58, 0x29, 0x36, {0x32, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x10001}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @enc_lim={0x4, 0x1, 0xff}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0x9, [0x4]}}]}}}], 0x58}}, {{&(0x7f0000000740)={0xa, 0x4e23, 0x7f, @mcast2, 0x7}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000780)="52dabd1b038041f1745f4fe57f7a1725bc9d2f46359154feb67f", 0x1a}, {&(0x7f00000007c0)="a0e6e0f9fd673ee657af90c44c9fcb737383efc33da73b47420cf2924b84d21e30bcf656c07582fe588c53da9fd738cf91ffcaad64f917dbffcbef9820e760d2f8b35325fa9e73fe51a9c8066411a041cc54c914a6fdc675e80dafadeb7b11127a8db22e5055dee9d00042fd269996a1726d51d411bfde2d7b9a8df2652f0b1f30c9211203df842ffa2e5a8673dcae3d4e31ac51f14ef2edfde2dd63886de8d7fecd86e9cbcd1bf7a3fd2a2a69d8cd30c11d05a73ee66b48f4e73d8529809d737609cf6e42eafe9c09", 0xc9}, {&(0x7f00000008c0)="0ff105ac980fb315c91ff4ccc0dbabfdc2934bf772957dfd0e3aa79e25d626c6606eb91a330da21c554ccbfec0f693da13582701cf92eeeaa5a31da89b5ec1caa95b3e4fd0618e4fa3c69d6cbcfaac1a4290163588743ed29baa3476924b07f001a46b2af73b3412168fe905aa2b65779c53deda5a1d7246ecf0c1f25ee59ddc8570", 0x82}, {&(0x7f0000000980)="e6d62d3ecaebcd0a7f515a5b3ca8187215c9355c03019815ac487647ef029ad63af4fac897340143396c6d242802fcca9fb2bd214b30a944e0f274d95e29921df963487a43f7a684555083b4f7e7c4ef63c94d4d5534544a5808f21656dfd092dc3b2938ecd160d0fb2446c61e27410a2774904228c4180f6a0043e979782a7ba6d29e95eef839a7bf9a2a017a8839a859acf7b16b1c09c1404ce95e0b113bfaf74c10b92a882a0496c00ace244ace22", 0xb0}], 0x4}}, {{&(0x7f0000000a80)={0xa, 0x4e23, 0xb3a, @local, 0x4}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000000ac0)="dfceb8ce8229df08d2ef75d70c031603bfd3d888ca971b3a1e5ec98f404dd5ebf5118d0ed0329369469ca0c5c782d358f17fda0f75332653465c9c1c98e739448291dfd3947db1437c9a439dfa27af1b9b61d807dc974b43a4073f94fa1a0e3356cd90b4704b958c8d97130b445df894fc954c16b639262f743378135b3a302145701f5de6ee4149504d5cb5945438b319b977704a14cb1c61fa05f36e2769595d440a8b7f16d6a16113f84adf5dc099af5bfc8550215540b39c5c6573f599a9f39db8d67e1a1ef26702450e07afb8d76b55ab9d45a358", 0xd7}, {&(0x7f0000000bc0)="a3d55647e2100981e017ddd5222c272ec12ae29b550bec285e9e12c912398dd29e5afb25267b07c1ba239a9f5101652527f0d5c8cf77e793e382ed76f69fe37eed386b58fa89983dd1e7c272364111442529fdfa6808f8972ee25b9c305460d976b41eef83a3eadf697fb392dbc1b108264678d73709a611e1839a32e96e3d29b5852e105c3790d93374b2110edd8fabf840396544056e8adfa744595040b8", 0x9f}, {&(0x7f0000000c80)="5f233752b16edc3907782b8414110ffe8300d6e1081c9d5d28d2bb4cc9a2a8b7f13d6daac8e3efd3734bace0c9a9704de370c24094513fd322b41819dacd811d73e15a8b3861181ed180ca9a20a51136c49c87b6a256e5331976c1a347b885fa05ee74a73b34a2f8f279f7a372f491ba2c361874ed44ab1803ae36f3274c74884909dd5f3360b8a0c6d6e121a48e1688d4744fa122da60501292d8f9c00050286a5e0277d1938a94ed0a80b8df3067", 0xaf}, {&(0x7f0000000d40)="94f580e44d8b114b9c3ad8d24ef34e48c88ac058c38caca042c66d9154fe6623ec75efcb900a34aa4dc46692ece96858ae16d85fdf64ac793abc5db301c28945131c0b6861fe0cce4c2c3c583a388d0e503917fb99afdad8c397dc58b9d632337b29d18b7e516c2dcb72e0b02ea8e6bd455972e7f032dbd91538e70d3f", 0x7d}, {&(0x7f0000000dc0)="58080ca1eacb6bbe8f50e8083e6a67f2a4180d2506af1fb840a5b1edd8c57a6b7556208577cf57f7af3fce99b96c70f4becd27c2b4cc225bbf11f0a46e1a4f3da18e61b2a4ed0cbe96589d77e800e2959076b9f7cf2a2ed9509706209753e509a28cbb30e609c11c1794be00f48a7e6d1d433fdbb0de6a318540fb060e57d822356dcd7c31d03846236d578306be93268e9d7660fb2a613477c46899fc318fa4", 0xa0}, {&(0x7f0000000e80)="1ef7d656bed9d0980cec4f238c9ff337aaee2aa985abb2ea8d82c2b237cf95a9bbe1cddba2191e3a4aeb6d1a84ceac59dc502470430f5d7161823832f61748d146def54b0b2c2471530cd7c5b5d666093a0b31e448ef7c7a07f7a77f1dc7eb6a546a8b64c44753619c936db23bd8e9e23f169ddd799c1efbe04877cfacf712a3eccd4b0970f8f999c09d38e8b2be27c4fdbe7f47827cc451de973d6d47d5c6eac420dc9edda788b3985b5f57bde86a71508618", 0xb3}, {&(0x7f0000000f40)="5f020ec5cc71a4d524c7f8cbf2df46f32a64873d0a354094dbedd44eb7898cb7373acf37b8270624c09a240fc9542bd4cdf9800113454dca70a27075244a30ea9562e93e32f4ab9b7be12179ffd997279f10dd21453b6d0487146cbfbead38e07d5eaf95c0c3732ec2cd97fa01bd827e6cb33ab5ec20b4afa0293450cfd75c5bf94fa2962feaaf794f90a76862700c7de72fc055d181fb81d7a195d38b968e", 0x9f}, {&(0x7f0000001000)="c55273fbb12bc53299453fdc310c560e67f15fff2d339f4b4ab817049f81a506635e1cb2c658e452443e236b29a6d9773619d68520e50f0e3d9ca723cc07d4515296cf6b64dc8fb2434e2bad13f45d757f867dfab2a048aedaf7fbb6b3168f95f33a3a00b0c5f40c5b1cf2d7c909876840782dbe15bde249cea8ebaa1feca4183d4db876ab96b56065a4a6af39cb85d0f43ba8ace5d34c824ef13124143dc471679a5151e7db2b23475e82e2e089880d4ae920c784", 0xb5}, {&(0x7f00000010c0)="b14ca7d9292e2ebfa831074fddf9bfb7fb7581dac4cd9e7e5239132ee1b76d9e7d76653242c37973c1928d0f56217d1d5a048916fbc9b27d55602a55784cf0af8cd2c996e8d1e6812cf1e475d4af34f5986b294a6f5e6aa6a11575009ba5626f21c4efc488e4f7e39129a397cec3dd5b2d1794", 0x73}], 0x9}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001200)="79a08172b1c0a269ae667a87173afa6f4ccd9c69b755ed33e7b250f079285e2a5c8541cbe5cabe7533739c906f646c27069ac19e0a9c19655cc0fe06782b2861ed76d899a73422f8f96b74e70568b0b747d9b62861ce1619b15ba2188565b676366a34d25bb21fe4eb282bfd1d636831a9ef82acbe11a22b8f0fcb9df05ccdc7f10e39524c7caa5f973c81408c96d3175ac49ca8e94d3ea32beecd5493b6fcb36648e3b8e79405b2ff0d91fb076db60b611953a15192ad47cb910610bcfa74d4d8dad9c7c4ed937e4eb901912b9bbb88", 0xd0}, {&(0x7f0000001300)="f42d12298bab60bd87e1c4a3722c51795bc4a0b55618612aedbd1a3b62d9e92e5d72fa6a22827242f59732997d4a57476fed11abfdeff015170e5e8722bb281ad002592904d9bbe362b6d78fcbf0474e730a4c2878c97684eaa63e7ad2250db007fd7f10fd516480f29fd656cc2633ce61e95455306afb41a30ddb8a4514b3cebdebec73456423124d5f3b82873d68bfc5379e6bbe3d7e63776ad8fb85e19b46c4859f014a92ff1d88739ceae52c5b90ca5b98089de142255a32e39707c7a1d42e5ea8989c37604509a8cc0f00d670827ff2b8f5294e4bdb726dd103b42912df99194d38ab6138d917ccfba95eb746ed9f", 0xf1}, {&(0x7f0000001400)="df6bdfceca812494c626bfb505ea0b4b16612f428a9e7684dc50d9f84567df5ed065d58feb468af5abc10a4b3913bf153631dc2ec86b10534f91baa19cfcf070cf54c535bc6859c4268da079c48d47153413ebb9c79464bfb17833750b808f2bf29ac18ccae4e3c97441c5f78369a3b752c239d5ee914853f0d2c1b212771e44ffc2da", 0x83}, {&(0x7f00000014c0)="3000f964f5f7abbc176ce9ea88bafd9400ab03e69525807e8d5521acdeaa298759aacf54dad1761b24d253718d6fdca0c902570b23662c8f431434bd2e8f8deddfc3f080eef99b6774fe645ddf499e865b44847da03b7b6380a19208ab484a71598457d98c98e34e09d2a685f06461d723473a1f5ee43b4b383224d48d36f67a342d524e3af3abb0c5cb12ee377cbe274eeb86d45f110282956ae352e26fcf20718ddfa0ed82e292a5828abf322922a1423d5bf3a4c333cd19721444c3d73636211bb569e45bf22eaa373c605ad5f1b6dd2e9c016667", 0xd6}, {&(0x7f00000015c0)="c664ee147ce46250ec14886928a31da91bd65358496e8e8855f6c6ba21bc231f", 0x20}, {&(0x7f0000001600)="ed269208cdab2cda011f250de140c67105cfe1a96fae4a51ab64e4bc67145cd900a0c85b1b22662c006628d9a7922fdc9041610117249b16a24edcc3449d9bc9f578151b1a9b2865bb2a64ac9f4165993e212e6443acea244e4fe3f0bda468609e83567910a158384c5d2668d6c605b61af8a786f4e0c2bf9851d082b9c70f25e868cf39d3a929d666226ada4d83c423f216a993651959aede054e44b863ad551492afa2bf56b228a88e6faa1b32a24397eb189b", 0xb4}], 0x6, &(0x7f0000001800)=[@hoplimit={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r3}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dontfrag={{0x14, 0x29, 0x3e, 0x40}}], 0x70}}, {{&(0x7f0000001880)={0xa, 0x4e24, 0xfff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x8001}, 0x1c, &(0x7f0000003900)=[{&(0x7f00000018c0)}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="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", 0x1000}], 0x3, &(0x7f0000003940)=[@rthdr={{0x28, 0x29, 0x39, {0xa6926b78151a853a, 0x2, 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x21}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r5}}}], 0x50}}], 0x6, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 15:31:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) write$P9_RREADLINK(r4, &(0x7f0000000240)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') accept$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r7, 0x303, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x23090408}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r7, 0x6, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x800) 15:31:07 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 15:31:07 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) [ 1467.117775] audit: type=1326 audit(1661959867.294:140): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8141 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 [ 1467.152513] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:31:07 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x0, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:31:07 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 15:31:07 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 15:31:07 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:31:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20101800, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:31:07 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:31:07 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x34000, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:31:07 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) 15:31:07 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x0, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:31:07 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) [ 1467.392324] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1467.940115] audit: type=1326 audit(1661959868.118:141): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8141 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:31:21 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 15:31:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xd0c1, 0x0) 15:31:21 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100902, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:31:21 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x80000, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:31:21 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) 15:31:21 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20104000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:31:21 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x0, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:31:21 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) [ 1481.538861] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1481.557837] audit: type=1326 audit(1661959881.736:142): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8201 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:31:21 executing program 5: pipe2$9p(&(0x7f00000000c0), 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 15:31:21 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x400300, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:31:21 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:31:21 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) [ 1481.739811] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1482.389122] audit: type=1326 audit(1661959882.567:143): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8201 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:31:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/fscreate\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10000, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) 15:31:37 executing program 5: pipe2$9p(&(0x7f00000000c0), 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 15:31:38 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0xe0ffff, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:31:38 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7f4605cfafff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:31:38 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) 15:31:38 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) 15:31:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100903, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:31:38 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x0, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) [ 1497.884826] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1497.893474] audit: type=1326 audit(1661959898.071:144): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8231 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:31:38 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0xf0ffff, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:31:38 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7fffffffe000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:31:38 executing program 5: pipe2$9p(&(0x7f00000000c0), 0x0) openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 15:31:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100904, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:31:38 executing program 2: write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 15:31:38 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x10000000) [ 1498.097250] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:31:38 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x0, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:31:38 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x1000000, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1498.297899] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1498.714538] audit: type=1326 audit(1661959898.892:145): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8231 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:31:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) 15:31:50 executing program 2: write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 15:31:50 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x2000000, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:31:50 executing program 5: pipe2$9p(&(0x7f00000000c0), 0x0) openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 15:31:50 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) 15:31:50 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7fffffffefff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:31:50 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:31:50 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100905, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1510.629341] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1510.645315] audit: type=1326 audit(1661959910.821:146): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8284 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:31:50 executing program 5: pipe2$9p(&(0x7f00000000c0), 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 15:31:50 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:31:50 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) 15:31:50 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7ffffffff000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:31:50 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x3000000, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:31:50 executing program 5: pipe2$9p(&(0x7f00000000c0), 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 15:31:50 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100906, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:31:50 executing program 2: write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) [ 1510.837942] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1511.462878] audit: type=1326 audit(1661959911.640:147): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8284 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:32:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100907, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:32:04 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x4000000, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:32:04 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:32:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:32:04 executing program 2: pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 15:32:04 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) 15:32:04 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 15:32:04 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) [ 1524.097819] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:32:04 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x5000000, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) 15:32:04 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) [ 1524.159810] audit: type=1326 audit(1661959924.334:148): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8333 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ead18b19 code=0x0 15:32:04 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 15:32:04 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) [ 1524.222112] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 15:32:04 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0xd}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x44081, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000680)=0x10000000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x20, 0x4, 0x2}}, 0x14) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:32:04 executing program 2: pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 15:32:04 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x320840c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x13) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 15:32:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:32:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100908, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:32:04 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 15:32:04 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x6000000, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1524.299917] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1524.346633] ================================================================== 15:32:04 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) [ 1524.347249] BUG: KASAN: use-after-free in __kernfs_remove+0x9dd/0xb30 [ 1524.347913] Read of size 2 at addr ffff888008c2e520 by task syz-executor.1/8364 [ 1524.348459] [ 1524.348593] CPU: 1 PID: 8364 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220829 #1 [ 1524.349203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1524.350039] Call Trace: [ 1524.350238] [ 1524.350412] dump_stack_lvl+0x8b/0xb3 [ 1524.350709] print_report.cold+0x5e/0x5e5 [ 1524.351039] ? __kernfs_remove+0x9dd/0xb30 [ 1524.351365] kasan_report+0xb1/0x1c0 [ 1524.351658] ? __kernfs_remove+0x9dd/0xb30 [ 1524.351991] __kernfs_remove+0x9dd/0xb30 [ 1524.352311] ? lock_is_held_type+0xd7/0x130 15:32:04 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@report={0x4c, 0x12, 0x107, 0x0, 0x7000000, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0) [ 1524.352658] ? kernfs_next_descendant_post+0x300/0x300 [ 1524.353167] ? kernfs_name_hash+0xe7/0x110 [ 1524.353499] kernfs_remove_by_name_ns+0xa8/0x110 [ 1524.353883] sysfs_slab_add+0x142/0x1f0 [ 1524.354198] __kmem_cache_create+0x49d/0x600 [ 1524.354553] kmem_cache_create_usercopy+0x1fd/0x2e0 [ 1524.354946] p9_client_create+0xc85/0x1050 [ 1524.355288] ? p9_client_rpc+0xad0/0xad0 [ 1524.355596] ? lock_is_held_type+0xd7/0x130 [ 1524.355925] ? lockdep_init_map_type+0x21a/0x7e0 [ 1524.356294] ? __raw_spin_lock_init+0x36/0x110 [ 1524.356649] v9fs_session_init+0x1dd/0x1670 [ 1524.356978] ? lock_release+0x3b2/0x750 [ 1524.357278] ? __kmem_cache_alloc_node+0x224/0x3c0 [ 1524.357646] ? lock_downgrade+0x6d0/0x6d0 [ 1524.357968] ? v9fs_show_options+0x690/0x690 [ 1524.358303] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1524.358689] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1524.359079] ? lock_is_held_type+0xd7/0x130 [ 1524.359411] v9fs_mount+0xb9/0xbd0 [ 1524.359680] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1524.360049] ? v9fs_statfs+0x4d0/0x4d0 [ 1524.360343] ? cap_capable+0x1eb/0x250 [ 1524.360650] ? v9fs_statfs+0x4d0/0x4d0 [ 1524.360945] legacy_get_tree+0x105/0x220 [ 1524.361238] vfs_get_tree+0x8e/0x300 [ 1524.361633] path_mount+0x1310/0x1e20 [ 1524.361919] ? kasan_quarantine_put+0x8b/0x1f0 [ 1524.362627] ? finish_automount+0x8d0/0x8d0 [ 1524.362944] ? putname+0xfe/0x140 [ 1524.363234] __x64_sys_mount+0x282/0x300 [ 1524.363828] ? path_mount+0x1e20/0x1e20 [ 1524.364123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1524.364497] do_syscall_64+0x3b/0x90 [ 1524.364771] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1524.365146] RIP: 0033:0x7f4827e8ab19 [ 1524.365417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1524.366686] RSP: 002b:00007f4825400188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1524.367239] RAX: ffffffffffffffda RBX: 00007f4827f9df60 RCX: 00007f4827e8ab19 [ 1524.367749] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000020100908 [ 1524.368251] RBP: 00007f4827ee4f6d R08: 0000000020000240 R09: 0000000000000000 [ 1524.368754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1524.369260] R13: 00007ffffaf6652f R14: 00007f4825400300 R15: 0000000000022000 [ 1524.369771] [ 1524.369943] [ 1524.370067] Allocated by task 8363: [ 1524.370324] kasan_save_stack+0x1e/0x40 [ 1524.370614] __kasan_slab_alloc+0x66/0x80 [ 1524.370917] kmem_cache_alloc+0x1b1/0x3e0 [ 1524.371221] __kernfs_new_node+0xd4/0x8c0 [ 1524.371525] kernfs_create_dir_ns+0x9c/0x230 [ 1524.371848] sysfs_create_dir_ns+0x127/0x290 [ 1524.372173] kobject_add_internal+0x24c/0x8e0 [ 1524.372501] kobject_init_and_add+0x101/0x160 [ 1524.372829] sysfs_slab_add+0x165/0x1f0 [ 1524.373114] __kmem_cache_create+0x49d/0x600 [ 1524.373432] kmem_cache_create_usercopy+0x1fd/0x2e0 [ 1524.373795] p9_client_create+0xc85/0x1050 [ 1524.374095] v9fs_session_init+0x1dd/0x1670 [ 1524.374406] v9fs_mount+0xb9/0xbd0 [ 1524.374666] legacy_get_tree+0x105/0x220 [ 1524.374963] vfs_get_tree+0x8e/0x300 [ 1524.375250] path_mount+0x1310/0x1e20 [ 1524.375530] __x64_sys_mount+0x282/0x300 [ 1524.375828] do_syscall_64+0x3b/0x90 [ 1524.376100] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1524.376472] [ 1524.376597] Freed by task 8364: [ 1524.376835] kasan_save_stack+0x1e/0x40 [ 1524.377139] kasan_set_track+0x21/0x30 [ 1524.377438] kasan_set_free_info+0x20/0x40 [ 1524.377762] __kasan_slab_free+0x108/0x190 [ 1524.378081] kmem_cache_free+0xf7/0x610 [ 1524.378383] kernfs_put.part.0+0x2c7/0x540 [ 1524.378701] kernfs_put+0x42/0x50 [ 1524.378975] __kernfs_remove+0x7d4/0xb30 [ 1524.379293] kernfs_remove_by_name_ns+0xa8/0x110 [ 1524.379652] sysfs_slab_add+0x142/0x1f0 [ 1524.379959] __kmem_cache_create+0x49d/0x600 [ 1524.380301] kmem_cache_create_usercopy+0x1fd/0x2e0 [ 1524.380683] p9_client_create+0xc85/0x1050 [ 1524.381009] v9fs_session_init+0x1dd/0x1670 [ 1524.381335] v9fs_mount+0xb9/0xbd0 [ 1524.381604] legacy_get_tree+0x105/0x220 15:32:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1524.381914] vfs_get_tree+0x8e/0x300 [ 1524.382319] path_mount+0x1310/0x1e20 [ 1524.382617] __x64_sys_mount+0x282/0x300 [ 1524.382935] do_syscall_64+0x3b/0x90 [ 1524.383238] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1524.383623] [ 1524.383755] The buggy address belongs to the object at ffff888008c2e488 [ 1524.383755] which belongs to the cache kernfs_node_cache of size 168 [ 1524.384694] The buggy address is located 152 bytes inside of [ 1524.384694] 168-byte region [ffff888008c2e488, ffff888008c2e530) [ 1524.385548] [ 1524.385678] The buggy address belongs to the physical page: [ 1524.386089] page:00000000654f489e refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888008c2e658 pfn:0x8c2e [ 1524.386123] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1524.386850] flags: 0x100000000000200(slab|node=0|zone=1) [ 1524.386871] raw: 0100000000000200 ffffea000038f8c0 dead00000000000e ffff88800847b8c0 [ 1524.386885] raw: ffff888008c2e658 000000008011000f 00000001ffffffff 0000000000000000 [ 1524.389059] page dumped because: kasan: bad access detected [ 1524.389471] [ 1524.389606] Memory state around the buggy address: [ 1524.389968] ffff888008c2e400: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc [ 1524.390497] ffff888008c2e480: fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1524.391038] >ffff888008c2e500: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb [ 1524.391564] ^ [ 1524.391888] ffff888008c2e580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1524.392415] ffff888008c2e600: fb fb fb fc fc fc fc fc fc fc fc fb fb fb fb fb [ 1524.392942] ================================================================== [ 1524.393660] Disabling lock debugging due to kernel taint 15:32:04 executing program 2: pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) [ 1524.437228] general protection fault, probably for non-canonical address 0x2b3ebdc220038c8: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 1524.438106] CPU: 0 PID: 300 Comm: syz-executor.5 Tainted: G B 6.0.0-rc3-next-20220829 #1 [ 1524.438832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1524.439699] RIP: 0010:qlist_free_all+0xaf/0x1a0 [ 1524.440078] Code: 80 4c 01 c2 0f 82 f8 00 00 00 48 c7 c0 00 00 00 80 48 2b 05 f3 3c 9b 03 48 01 d0 48 c1 e8 0c 48 c1 e0 06 48 03 05 d1 3c 9b 03 <48> 8b 48 08 48 89 c2 f6 c1 01 0f 85 ba 00 00 00 0f 1f 44 00 00 48 [ 1524.441462] RSP: 0018:ffff888015437df8 EFLAGS: 00010207 [ 1524.441885] RAX: 02b3ebdc220038c0 RBX: acffff88800e3197 RCX: 1ffffffff0b5eca1 [ 1524.442433] RDX: acffff89000e3197 RSI: 0000000000000008 RDI: ffffffff81784601 [ 1524.442983] RBP: 0000000000000000 R08: acffff88800e3197 R09: 0000000000000000 [ 1524.443533] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 1524.444073] R13: ffff888015437e38 R14: 0000000000000000 R15: ffff888008c13951 [ 1524.444616] FS: 0000555555c27400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1524.445217] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1524.445660] CR2: 0000555555c30c58 CR3: 000000002340e000 CR4: 0000000000350ef0 [ 1524.446194] Call Trace: [ 1524.446390] [ 1524.446571] ? trace_hardirqs_on+0x2d/0x110 [ 1524.446917] kasan_quarantine_reduce+0x184/0x210 [ 1524.447296] __kasan_slab_alloc+0x7c/0x80 [ 1524.447626] kmem_cache_alloc+0x1b1/0x3e0 [ 1524.447951] getname_flags.part.0+0x50/0x4f0 [ 1524.448309] __x64_sys_unlink+0xb1/0x110 [ 1524.448622] do_syscall_64+0x3b/0x90 [ 1524.448915] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1524.449315] RIP: 0033:0x7f0994096457 [ 1524.449606] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1524.450982] RSP: 002b:00007fffc2114af8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1524.451559] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0994096457 [ 1524.452099] RDX: 00007fffc2114b30 RSI: 00007fffc2114b30 RDI: 00007fffc2114bc0 [ 1524.452639] RBP: 00007fffc2114bc0 R08: 0000000000000001 R09: 00007fffc2114990 [ 1524.453183] R10: 0000555555c28cdb R11: 0000000000000206 R12: 00007f09940f0105 [ 1524.453730] R13: 00007fffc2115c80 R14: 0000555555c28c20 R15: 00007fffc2115cc0 [ 1524.454271] [ 1524.454459] Modules linked in: [ 1524.454768] ---[ end trace 0000000000000000 ]--- [ 1524.455147] RIP: 0010:qlist_free_all+0xaf/0x1a0 [ 1524.455518] Code: 80 4c 01 c2 0f 82 f8 00 00 00 48 c7 c0 00 00 00 80 48 2b 05 f3 3c 9b 03 48 01 d0 48 c1 e8 0c 48 c1 e0 06 48 03 05 d1 3c 9b 03 <48> 8b 48 08 48 89 c2 f6 c1 01 0f 85 ba 00 00 00 0f 1f 44 00 00 48 [ 1524.456939] RSP: 0018:ffff888015437df8 EFLAGS: 00010207 [ 1524.457329] RAX: 02b3ebdc220038c0 RBX: acffff88800e3197 RCX: 1ffffffff0b5eca1 [ 1524.457861] RDX: acffff89000e3197 RSI: 0000000000000008 RDI: ffffffff81784601 [ 1524.458366] RBP: 0000000000000000 R08: acffff88800e3197 R09: 0000000000000000 [ 1524.458892] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 1524.459411] R13: ffff888015437e38 R14: 0000000000000000 R15: ffff888008c13951 [ 1524.459931] FS: 0000555555c27400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1524.460506] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1524.460941] CR2: 0000555555c30c58 CR3: 000000002340e000 CR4: 0000000000350ef0 [ 1524.461748] ------------[ cut here ]------------ [ 1524.462290] WARNING: CPU: 0 PID: 298 at mm/kasan/shadow.c:134 kasan_unpoison+0x46/0x50 [ 1524.462918] Modules linked in: [ 1524.463176] CPU: 0 PID: 298 Comm: syz-executor.0 Tainted: G B D 6.0.0-rc3-next-20220829 #1 [ 1524.463902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1524.464752] RIP: 0010:kasan_unpoison+0x46/0x50 [ 1524.465116] Code: c6 01 e8 4d fe ff ff 48 89 e8 83 e0 07 74 14 48 ba 00 00 00 00 00 fc ff df 48 01 eb 48 c1 eb 03 88 04 13 5b 5d e9 0a 65 e7 02 <0f> 0b e9 03 65 e7 02 0f 1f 00 41 57 48 89 f8 41 56 48 c1 e8 03 41 [ 1524.466469] RSP: 0018:ffff88803ff67988 EFLAGS: 00010202 [ 1524.466879] RAX: 0000000003102900 RBX: 0000000000000000 RCX: 0000000000000000 [ 1524.467423] RDX: 0000000000000000 RSI: 0000000000000170 RDI: ffff888008c13951 [ 1524.467984] RBP: ffff888007c4f780 R08: 0000000000000000 R09: 0000000000000000 [ 1524.468517] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008c13951 [ 1524.469068] R13: 0000000000092cc0 R14: 0000000000092cc0 R15: 0000000000092cc0 [ 1524.469621] FS: 00005555570e1400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1524.470220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1524.470680] CR2: 00007fff5eadec3c CR3: 0000000018b56000 CR4: 0000000000350ef0 [ 1524.471219] Call Trace: [ 1524.471425] [ 1524.471618] __kasan_slab_alloc+0x2c/0x80 [ 1524.471944] kmem_cache_alloc+0x1b1/0x3e0 [ 1524.472276] __create_object.isra.0+0x3d/0xc10 [ 1524.472647] ? kasan_unpoison+0x23/0x50 [ 1524.472966] kmem_cache_alloc+0x23c/0x3e0 [ 1524.473289] __alloc_file+0x21/0x240 [ 1524.473614] alloc_empty_file+0x6d/0x170 [ 1524.473928] path_openat+0xd4/0x2800 [ 1524.474222] ? __is_insn_slot_addr+0x144/0x250 [ 1524.474599] ? kernel_text_address+0x57/0xb0 [ 1524.474941] ? __kernel_text_address+0x9/0x40 [ 1524.475304] ? unwind_get_return_address+0x55/0xa0 [ 1524.475704] ? write_profile+0x3e0/0x3e0 [ 1524.476022] ? path_lookupat+0x850/0x850 [ 1524.476336] ? rcu_read_lock_sched_held+0xd/0x80 [ 1524.476721] ? lock_acquire+0x45e/0x530 [ 1524.477046] do_filp_open+0x1b6/0x410 [ 1524.477343] ? may_open_dev+0xf0/0xf0 [ 1524.477652] ? rcu_read_lock_sched_held+0xd/0x80 [ 1524.478026] ? lock_release+0x547/0x750 [ 1524.478336] ? do_raw_spin_lock+0x121/0x260 [ 1524.478692] ? rwlock_bug.part.0+0x90/0x90 [ 1524.479022] ? _find_next_bit+0x1e5/0x260 [ 1524.479364] ? _raw_spin_unlock+0x24/0x40 [ 1524.479702] ? alloc_fd+0x2f0/0x700 [ 1524.479999] do_sys_openat2+0x171/0x4c0 [ 1524.480316] ? path_umount+0x6b6/0x1010 [ 1524.480651] ? build_open_flags+0x6f0/0x6f0 [ 1524.480991] ? may_mount+0xa0/0xa0 [ 1524.481279] __x64_sys_openat+0x13f/0x1f0 [ 1524.481622] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 1524.481998] ? __x64_sys_umount+0x114/0x190 [ 1524.482341] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 1524.482776] do_syscall_64+0x3b/0x90 [ 1524.483079] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1524.483476] RIP: 0033:0x7fbc303dd658 [ 1524.483777] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 1524.485121] RSP: 002b:00007fff5eadebb0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 1524.485714] RAX: ffffffffffffffda RBX: 000000000000020d RCX: 00007fbc303dd658 [ 1524.486254] RDX: 0000000000090800 RSI: 00007fff5eadfda0 RDI: 00000000ffffff9c [ 1524.486801] RBP: 00007fff5eadfd7c R08: 0000000000090800 R09: 00007fff5eadfda0 [ 1524.487353] R10: 0000000000000000 R11: 0000000000000287 R12: 00007fbc30437105 [ 1524.487907] R13: 00007fff5eadfda0 R14: 000000000000000b R15: 00007fff5eadfde0 [ 1524.488450] [ 1524.488651] irq event stamp: 1255166 [ 1524.488933] hardirqs last enabled at (1255165): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 1524.489692] hardirqs last disabled at (1255166): [] __schedule+0x11dd/0x24a0 [ 1524.490348] softirqs last enabled at (1254644): [] fpu_clone+0x3c2/0xb00 [ 1524.491005] softirqs last disabled at (1254642): [] fpu_clone+0x335/0xb00 [ 1524.491660] ---[ end trace 0000000000000000 ]--- [ 1524.499672] ------------[ cut here ]------------ [ 1524.500057] WARNING: CPU: 0 PID: 8377 at kernel/rcu/tree.c:2779 call_rcu+0x6d2/0xa30 [ 1524.500681] Modules linked in: [ 1524.500937] CPU: 0 PID: 8377 Comm: systemd-udevd Tainted: G B D W 6.0.0-rc3-next-20220829 #1 [ 1524.501657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1524.502508] RIP: 0010:call_rcu+0x6d2/0xa30 [ 1524.502858] Code: c1 ea 03 80 3c 02 00 0f 85 c0 02 00 00 48 8b 85 a0 00 00 00 48 85 c0 0f 85 2b fa ff ff 4c 89 ff e8 d3 d6 00 00 e9 1e fa ff ff <0f> 0b e9 44 f9 ff ff e8 02 20 ff ff e9 f9 fb ff ff e8 d8 b7 46 00 [ 1524.504239] RSP: 0000:ffff88806ce09db8 EFLAGS: 00010202 [ 1524.504665] RAX: 0000000000000000 RBX: ffff888008c139d1 RCX: ffffffff817c1ff8 [ 1524.505206] RDX: 0000000000000000 RSI: ffffffff817c1880 RDI: 0000000000000001 [ 1524.505766] RBP: ffff88806ce09e40 R08: 0000000000000001 R09: ffff888008c139e4 [ 1524.506300] R10: ffffed100118273c R11: 0000000000000001 R12: ffffffff817c1880 [ 1524.506854] R13: ffffffff81329032 R14: ffff888018b26580 R15: ffff88800847b640 [ 1524.507409] FS: 00007f4ca9d1b8c0(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1524.508027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1524.508473] CR2: 0000555f3c555e78 CR3: 00000000102f0000 CR4: 0000000000350ef0 [ 1524.509030] Call Trace: [ 1524.509231] [ 1524.509401] ? rcu_core+0x7e2/0x2080 [ 1524.509713] ? rcu_core+0x7e2/0x2080 [ 1524.510008] kmem_cache_free+0xbd/0x610 [ 1524.510318] rcu_core+0x7e2/0x2080 [ 1524.510624] ? rcu_report_dead+0x5b0/0x5b0 [ 1524.510957] ? tick_program_event+0xb4/0x140 [ 1524.511313] __do_softirq+0x1c8/0x8d0 [ 1524.511633] __irq_exit_rcu+0x11b/0x180 [ 1524.511945] irq_exit_rcu+0x5/0x20 [ 1524.512226] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 1524.512627] [ 1524.512807] [ 1524.512983] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1524.513388] RIP: 0010:do_user_addr_fault+0x78f/0x1300 [ 1524.513812] Code: 67 f4 ff ff 48 83 c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f e9 14 a1 33 00 e8 0f a1 33 00 e8 4a 7a 3a 00 fb c7 44 24 0c 54 02 00 00 f8 fa ff ff e8 f7 a0 33 00 0f 0b eb cc e8 ee a0 33 00 e8 29 7a [ 1524.515196] RSP: 0000:ffff888017c87eb8 EFLAGS: 00000246 [ 1524.515620] RAX: 0000000000000007 RBX: 0000000000000003 RCX: 1ffffffff0b5eca1 [ 1524.516163] RDX: 0000000000000000 RSI: ffffffff811239d1 RDI: ffffffff811239d6 [ 1524.516729] RBP: ffff888017c87f58 R08: 0000000000000000 R09: 0000000000000000 [ 1524.517261] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000007 [ 1524.517821] R13: 0000555f3c555e78 R14: 0000555f3c555e78 R15: ffff88801bba6200 [ 1524.518382] ? do_user_addr_fault+0x781/0x1300 [ 1524.518766] ? do_user_addr_fault+0x786/0x1300 [ 1524.519149] ? do_user_addr_fault+0x786/0x1300 [ 1524.519516] ? fpregs_restore_userregs+0x15f/0x380 [ 1524.519927] exc_page_fault+0x98/0x1a0 [ 1524.520236] asm_exc_page_fault+0x22/0x30 [ 1524.520590] RIP: 0033:0x555f39f7ffbf [ 1524.520883] Code: 4e 08 48 89 fb 48 89 4c 24 28 48 89 44 24 10 48 85 c0 0f 84 d2 01 00 00 48 8b 44 24 10 48 89 43 20 48 8b 48 10 48 89 4c 24 08 <48> 89 48 08 48 85 c9 0f 84 9c 01 00 00 0f 1f 40 00 48 8b 44 24 08 [ 1524.522261] RSP: 002b:00007ffe7c8e6a30 EFLAGS: 00010202 [ 1524.522689] RAX: 0000555f3c555e70 RBX: 0000555f3c549d60 RCX: 0000555f3c555ee0 [ 1524.523247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1524.523807] RBP: 0000000000000009 R08: f0eff435bd54a40c R09: 0000000000000000 [ 1524.524347] R10: fad360dddfdcc239 R11: 0000000000000000 R12: 0000000000000000 [ 1524.524910] R13: 0000555f3c597aa0 R14: 0000000000000000 R15: 0000555f3c5794d0 [ 1524.525451] [ 1524.525653] irq event stamp: 0 [ 1524.525901] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 1524.526373] hardirqs last disabled at (0): [] copy_process+0x1dba/0x6dd0 [ 1524.527018] softirqs last enabled at (0): [] copy_process+0x1dfe/0x6dd0 [ 1524.527675] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 1524.528156] ---[ end trace 0000000000000000 ]--- [ 1524.528818] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] PREEMPT SMP KASAN NOPTI [ 1524.529665] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1524.530231] CPU: 0 PID: 13 Comm: ksoftirqd/0 Tainted: G B D W 6.0.0-rc3-next-20220829 #1 [ 1524.530913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1524.531776] RIP: 0010:rb_erase+0x3b1/0x1140 [ 1524.532108] Code: 89 ee 48 89 c5 e9 01 ff ff ff 48 8d 7d 10 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 aa 0c 00 00 4c 8b 65 10 4c 89 e0 48 c1 e8 03 <80> 3c 18 00 0f 85 9f 0c 00 00 49 8d 7c 24 08 49 8b 04 24 48 89 fa [ 1524.533471] RSP: 0018:ffff888008667c70 EFLAGS: 00010056 [ 1524.533874] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff812a95a1 [ 1524.534407] RDX: 1ffff11002ea4697 RSI: ffffffff87061680 RDI: ffff8880175234b8 [ 1524.534958] RBP: ffff8880175234a8 R08: 0000000000000001 R09: ffff888008667c33 [ 1524.535509] R10: ffffed10010ccf86 R11: 0000000000000001 R12: 0000000000000000 [ 1524.536042] R13: fffffbfff0e0c2d0 R14: 0000000000000000 R15: ffffffff87061680 [ 1524.536592] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1524.537199] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1524.537643] CR2: 0000555f3c555e78 CR3: 00000000189ac000 CR4: 0000000000350ef0 [ 1524.538181] Call Trace: [ 1524.538383] [ 1524.538568] find_and_remove_object+0x81/0x170 [ 1524.538935] ? rcu_core+0x7e2/0x2080 [ 1524.539234] kmemleak_free+0x21/0x40 [ 1524.539530] kmem_cache_free+0xbd/0x610 [ 1524.539844] rcu_core+0x7e2/0x2080 [ 1524.540119] ? rcu_report_dead+0x5b0/0x5b0 [ 1524.540451] ? rcu_read_lock_sched_held+0xd/0x80 [ 1524.540835] __do_softirq+0x1c8/0x8d0 [ 1524.541144] ? __irq_exit_rcu+0x180/0x180 [ 1524.541468] run_ksoftirqd+0x31/0x60 [ 1524.541758] smpboot_thread_fn+0x66f/0xa10 [ 1524.542087] ? sort_range+0x30/0x30 [ 1524.542380] kthread+0x2ed/0x3a0 [ 1524.542652] ? kthread_complete_and_exit+0x40/0x40 [ 1524.543044] ret_from_fork+0x22/0x30 [ 1524.543341] [ 1524.543524] Modules linked in: [ 1524.543779] ---[ end trace 0000000000000000 ]--- [ 1524.544136] RIP: 0010:qlist_free_all+0xaf/0x1a0 [ 1524.544506] Code: 80 4c 01 c2 0f 82 f8 00 00 00 48 c7 c0 00 00 00 80 48 2b 05 f3 3c 9b 03 48 01 d0 48 c1 e8 0c 48 c1 e0 06 48 03 05 d1 3c 9b 03 <48> 8b 48 08 48 89 c2 f6 c1 01 0f 85 ba 00 00 00 0f 1f 44 00 00 48 [ 1524.545865] RSP: 0018:ffff888015437df8 EFLAGS: 00010207 [ 1524.546264] RAX: 02b3ebdc220038c0 RBX: acffff88800e3197 RCX: 1ffffffff0b5eca1 [ 1524.546818] RDX: acffff89000e3197 RSI: 0000000000000008 RDI: ffffffff81784601 [ 1524.547357] RBP: 0000000000000000 R08: acffff88800e3197 R09: 0000000000000000 [ 1524.547900] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 1524.548439] R13: ffff888015437e38 R14: 0000000000000000 R15: ffff888008c13951 [ 1524.548978] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1524.549588] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1524.550031] CR2: 0000555f3c555e78 CR3: 00000000189ac000 CR4: 0000000000350ef0 [ 1524.550576] Kernel panic - not syncing: Fatal exception in interrupt [ 1525.635806] Shutting down cpus with NMI [ 1525.636337] Kernel Offset: disabled [ 1525.636625] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 15:32:04 Registers: info registers vcpu 0 RAX=0000000080000002 RBX=80000000418ef007 RCX=ffffffff816a4b49 RDX=0000000000000082 RSI=000000000000007f RDI=0000000000000005 RBP=ffff888041e38830 RSP=ffff888015437730 R8 =0000000000000005 R9 =000000000000007f R10=0000000000000082 R11=0000000000000001 R12=ffffea0001063bf4 R13=dffffc0000000000 R14=ffffea0001063bc0 R15=ffffea0001063bc8 RIP=ffffffff8145d650 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555c27400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6a4d1353a4 CR3=000000002340e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 00ff000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0001000000000000 YMM02=0000000000000000 0000000000000000 7463656a6e695f31 313230385f7a7973 YMM03=0000000000000000 0000000000000000 00007fa3eadff7c8 00007fa3eadff7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff824487a1 RDI=ffffffff8763bc20 RBP=ffffffff8763bbe0 RSP=ffff88801837f118 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000034 R11=0000000000000001 R12=0000000000000034 R13=ffffffff8763bbe0 R14=0000000000000010 R15=ffffffff82448790 RIP=ffffffff824487f9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4825400700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 ffff888000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020001000 CR3=00000000189ac000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000