96] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.889040][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.990377][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 07:04:42 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0xffffffffffffff29, &(0x7f0000001600)={&(0x7f0000000280)=ANY=[@ANYBLOB="01067f076748b4f245000000000000000000000000007d4a1218bd", @ANYBLOB="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"], 0x9d}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001800000000000000000000001d01000008000e00", @ANYBLOB="18fa0000000000000003"], 0x2}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_getscheduler(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r2, 0xa03, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2000000}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r2, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40000) [ 184.035453][ T7928] team0: Port device team_slave_0 added [ 184.094296][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.142567][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.164385][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.192997][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.215826][ T8008] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.264927][ T8008] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 184.334127][ T7928] team0: Port device team_slave_1 added [ 184.385223][ T8008] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 184.445528][ T8008] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 184.489108][ T7928] device hsr_slave_0 entered promiscuous mode [ 184.516646][ T8008] EXT4-fs error (device loop0): ext4_fill_super:4489: inode #2: comm syz-executor.0: iget: bogus i_mode (0) [ 184.585736][ T8008] EXT4-fs (loop0): get root inode failed [ 184.606830][ T7928] device hsr_slave_1 entered promiscuous mode [ 184.620753][ T8008] EXT4-fs (loop0): mount failed [ 184.686963][ T7928] debugfs: Directory 'hsr0' with parent '/' already present! [ 184.750469][ T7895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.084088][ T7899] 8021q: adding VLAN 0 to HW filter on device bond0 07:04:43 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0xffffffffffffff29, &(0x7f0000001600)={&(0x7f0000000280)=ANY=[@ANYBLOB="01067f076748b4f245000000000000000000000000007d4a1218bd", @ANYBLOB="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"], 0x9d}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001800000000000000000000001d01000008000e00", @ANYBLOB="18fa0000000000000003"], 0x2}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_getscheduler(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r2, 0xa03, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2000000}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r2, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40000) [ 185.197036][ T7895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.242655][ T7903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.365341][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.373489][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.463776][ T7901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.514125][ T8082] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.528188][ T7899] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.541729][ T7903] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.628906][ T8082] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 185.643418][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.675990][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.683850][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.720462][ T8082] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 185.800342][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.805421][ T8082] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 185.855878][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.864898][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.920698][ T8082] EXT4-fs error (device loop0): ext4_fill_super:4489: inode #2: comm syz-executor.0: iget: bogus i_mode (0) [ 185.935861][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.942939][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.995958][ T8082] EXT4-fs (loop0): get root inode failed [ 186.001693][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.013491][ T8082] EXT4-fs (loop0): mount failed [ 186.026178][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.059399][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.066654][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.124549][ T7901] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.148050][ T7928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.193869][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.221713][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 07:04:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0) dup(0xffffffffffffffff) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x80000) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000000c0)={[{0x8000, 0x81, 0xaa, 0x6, 0x0, 0x6, 0x80, 0xc0, 0x5, 0x5, 0x9, 0x0, 0x20}, {0x9, 0x6, 0x0, 0x7f, 0xdc, 0x7, 0x1, 0x0, 0x57, 0x0, 0x8, 0x4, 0x6}, {0x0, 0x9, 0x7f, 0x2a, 0xff, 0x3, 0x0, 0x7f, 0x1f, 0x9, 0xfb, 0x1, 0x8}], 0x2}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000001c0)={0x0, 0x101, "41029afcf4be671978e4aa1f4a523c90b883f83bcc2a25df4166c17284026711", 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x8001, [0x20, 0x4, 0x5, 0x5]}) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') [ 186.260003][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.315646][ T7896] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.322741][ T7896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.386027][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.394755][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 07:04:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0) dup(0xffffffffffffffff) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x80000) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000000c0)={[{0x8000, 0x81, 0xaa, 0x6, 0x0, 0x6, 0x80, 0xc0, 0x5, 0x5, 0x9, 0x0, 0x20}, {0x9, 0x6, 0x0, 0x7f, 0xdc, 0x7, 0x1, 0x0, 0x57, 0x0, 0x8, 0x4, 0x6}, {0x0, 0x9, 0x7f, 0x2a, 0xff, 0x3, 0x0, 0x7f, 0x1f, 0x9, 0xfb, 0x1, 0x8}], 0x2}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000001c0)={0x0, 0x101, "41029afcf4be671978e4aa1f4a523c90b883f83bcc2a25df4166c17284026711", 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x8001, [0x20, 0x4, 0x5, 0x5]}) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') [ 186.447591][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.467139][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.496990][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.512661][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.553513][ C0] hrtimer: interrupt took 27537 ns [ 186.570651][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 07:04:45 executing program 0: fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000040)='./file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}]}, 0x3c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e970069c165315c00"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file1\x00', 0x111000, 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) [ 186.598772][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.636323][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.683815][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.698494][ T7896] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.705633][ T7896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.713739][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.717419][ T8128] overlayfs: failed to resolve '.—': -2 [ 186.722421][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.736364][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.744803][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.753171][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.762024][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.772389][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.780234][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.788411][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.796705][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.804873][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.820887][ T7928] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.842784][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.863422][ T8128] overlayfs: failed to resolve '.—': -2 [ 186.876853][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 07:04:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000e0ff1800dbf5000000000000df8b0200000000000000000000000c0005000500000023af3f1e935b007811d40db0fd4d56334831ad110c770656a86274be5ca54ae651dd906d03debc0756d1d0f79110f546d1259d93f33d6d89665e501ba44b7ba474fb860c0320cb40affbf06e082b02bc423f9dbbda2432f3ff85b6f9942a44542f59b86b736751a1c99d80cff53dcd1d237d94a0cd140b92abb2f546", @ANYRES32=r0, @ANYBLOB="08000100e0000002"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 186.895656][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.904055][ T7961] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.911179][ T7961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.919289][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.927316][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.940370][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.955888][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.964315][ T7961] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.971432][ T7961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.984468][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.993025][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.001547][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.010656][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.019964][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.034133][ T7903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.051574][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.085004][ T7899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.103014][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.119237][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.139097][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.157975][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.166669][ T7961] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.173741][ T7961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.188037][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.200271][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 07:04:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r7, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r12) r13 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r15) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r16) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r6], 0x2}], 0x1, &(0x7f00000017c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r7, 0xffffffffffffffff, r5]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r14}}}, @rights={{0x1c, 0x1, 0x1, [r4, 0xffffffffffffffff, r4]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r5, r5, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r15}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r16}}}], 0x128, 0x4040040}, 0x4000000) r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r18 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r20 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r20, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r20, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r21 = socket$rxrpc(0x21, 0x2, 0xa) r22 = syz_open_procfs(0xffffffffffffffff, 0x0) r23 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r23, 0xae80, 0x0) r24 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r27) r28 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r28, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r30) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r31) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r19], 0x2}], 0x1, &(0x7f00000017c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r18, 0xffffffffffffffff, r20, r21, r18]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r22, r23]}}, @cred={{0x1c, 0x1, 0x2, {r24, 0x0, r25}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r29}}}, @rights={{0x1c, 0x1, 0x1, [r17, 0xffffffffffffffff, r17]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r18, 0xffffffffffffffff, r18, r18, r18]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r30}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r31}}}], 0x128, 0x4040040}, 0x4000000) r32 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r33 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r35 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r35, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r35, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r36 = socket$rxrpc(0x21, 0x2, 0xa) r37 = syz_open_procfs(0xffffffffffffffff, 0x0) r38 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r38, 0xae80, 0x0) r39 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r41 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r42) r43 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r43, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r45) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r46) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r34], 0x2}], 0x1, &(0x7f00000017c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r33, 0xffffffffffffffff, r35, r36, r33]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r37, r38]}}, @cred={{0x1c, 0x1, 0x2, {r39, 0x0, r40}}}, @cred={{0x1c, 0x1, 0x2, {r41, r42, r44}}}, @rights={{0x1c, 0x1, 0x1, [r32, 0xffffffffffffffff, r32]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r33, 0xffffffffffffffff, r33, r33, r33]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r45}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r46}}}], 0x128, 0x4040040}, 0x4000000) getgroups(0x8, &(0x7f0000000080)=[0xffffffffffffffff, 0xee00, r25, 0x0, r44, 0x0, 0xee00, 0x0]) r48 = getgid() r49 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r50 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r52 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r52, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r52, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r53 = socket$rxrpc(0x21, 0x2, 0xa) r54 = syz_open_procfs(0xffffffffffffffff, 0x0) r55 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r55, 0xae80, 0x0) r56 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r58 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r59) r60 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r60, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r62) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r63) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r51], 0x2}], 0x1, &(0x7f00000017c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r50, 0xffffffffffffffff, r52, r53, r50]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r54, r55]}}, @cred={{0x1c, 0x1, 0x2, {r56, 0x0, r57}}}, @cred={{0x1c, 0x1, 0x2, {r58, r59, r61}}}, @rights={{0x1c, 0x1, 0x1, [r49, 0xffffffffffffffff, r49]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r50, 0xffffffffffffffff, r50, r50, r50]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r62}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r63}}}], 0x128, 0x4040040}, 0x4000000) getresgid(&(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)=0x0) r65 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r66 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r68 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r68, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r68, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r69 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r69, 0xae80, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)) r70 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r71) r72 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r72, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r72, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r74) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r75) r76 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r76, 0x4c80, 0x0) r77 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r77, 0x40044591, &(0x7f00000000c0)=0x5) r78 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r78, 0x4c80, 0x0) r79 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r79, 0x4c80, 0x0) r80 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r80, 0x40044591, &(0x7f00000000c0)=0x5) r81 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r81, 0x4c80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r67], 0x2}], 0x1, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r66, 0xffffffffffffffff, r68, r23, r66]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r69]}}, @rights={{0x28, 0x1, 0x1, [r76, r77, r78, r79, r80, r81]}}, @cred={{0x1c, 0x1, 0x2, {r70, r71, r73}}}, @rights={{0x1c, 0x1, 0x1, [r65, 0xffffffffffffffff, r65]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r66, 0xffffffffffffffff, r66, r66, r66]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r74}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r75}}}], 0x130, 0x4040040}, 0x4000000) r82 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r83 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r85 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r85, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r85, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r86 = socket$rxrpc(0x21, 0x2, 0xa) r87 = syz_open_procfs(0xffffffffffffffff, 0x0) r88 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r88, 0xae80, 0x0) r89 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r91 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r92) r93 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r93, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r93, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r95) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r96) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r84], 0x2}], 0x1, &(0x7f00000017c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r83, 0xffffffffffffffff, r85, r86, r83]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r87, r88]}}, @cred={{0x1c, 0x1, 0x2, {r89, 0x0, r90}}}, @cred={{0x1c, 0x1, 0x2, {r91, r92, r94}}}, @rights={{0x1c, 0x1, 0x1, [r82, 0xffffffffffffffff, r82]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r83, 0xffffffffffffffff, r83, r83, r83]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r95}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r96}}}], 0x128, 0x4040040}, 0x4000000) r97 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r98 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r100 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r100, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r100, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r101 = socket$rxrpc(0x21, 0x2, 0xa) r102 = syz_open_procfs(0xffffffffffffffff, 0x0) r103 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r103, 0xae80, 0x0) r104 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r106 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r107) r108 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r108, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r108, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r110) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r111) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r99], 0x2}], 0x1, &(0x7f00000017c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r98, 0xffffffffffffffff, r100, r101, r98]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r102, r103]}}, @cred={{0x1c, 0x1, 0x2, {r104, 0x0, r105}}}, @cred={{0x1c, 0x1, 0x2, {r106, r107, r109}}}, @rights={{0x1c, 0x1, 0x1, [r97, 0xffffffffffffffff, r97]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r98, 0xffffffffffffffff, r98, r98, r98]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r110}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r111}}}], 0x128, 0x4040040}, 0x4000000) r112 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r113 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r115 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r115, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r115, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r116 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r116, 0xae80, 0x0) r117 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r119 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r120) r121 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r121, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r121, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r123) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r124) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r114], 0x2}], 0x1, &(0x7f00000017c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r113, 0xffffffffffffffff, r115, 0xffffffffffffffff, r113]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r116]}}, @cred={{0x1c, 0x1, 0x2, {r117, 0x0, r118}}}, @cred={{0x1c, 0x1, 0x2, {r119, r120, r122}}}, @rights={{0x1c, 0x1, 0x1, [r112, 0xffffffffffffffff, r112]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r113, 0xffffffffffffffff, r113, r113, r113]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r123}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r124}}}], 0x128, 0x4040040}, 0x4000000) r125 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r126 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r128 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r128, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r128, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r129 = socket$rxrpc(0x21, 0x2, 0xa) r130 = syz_open_procfs(0xffffffffffffffff, 0x0) r131 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r131, 0xae80, 0x0) r132 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r134 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r135) r136 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r136, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r136, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r138) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r139) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r127], 0x2}], 0x1, &(0x7f00000017c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r126, 0xffffffffffffffff, r128, r129, r126]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r130, r131]}}, @cred={{0x1c, 0x1, 0x2, {r132, 0x0, r133}}}, @cred={{0x1c, 0x1, 0x2, {r134, r135, r137}}}, @rights={{0x1c, 0x1, 0x1, [r125, 0xffffffffffffffff, r125]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r126, 0xffffffffffffffff, r126, r126, r126]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r138}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r139}}}], 0x128, 0x4040040}, 0x4000000) getgroups(0x8, &(0x7f00000002c0)=[r75, 0xee00, r94, 0xffffffffffffffff, r111, r118, r133, 0xee00]) setgroups(0x8, &(0x7f0000000300)=[r2, r3, r14, r47, r48, r63, r64, r140]) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x525, &(0x7f0000000200)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9206ac3d78578125082f4fcc477cb57f5650731dfaf12aa77ad43cb41f04b15a9fdd6c1610c621c85fe3e348527b0"], 0x18}}, 0x0) r141 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r141, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") close(r0) [ 187.210689][ T7961] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.217800][ T7961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.231107][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.239928][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.253624][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.262534][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.293851][ T7903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.308946][ T7901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.333874][ T7901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.359961][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.374151][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.382798][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.398158][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.410847][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.421476][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.433786][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.444966][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.459281][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.470427][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.491182][ T7928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.509994][ T7928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.546238][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.553845][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.573466][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.584813][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.593803][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.602644][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.611074][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.619389][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.628622][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.638830][ T7901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.727179][ T7928] 8021q: adding VLAN 0 to HW filter on device batadv0 07:04:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x88) ioctl$VT_ACTIVATE(r1, 0x5606, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) setsockopt$inet_udp_int(r3, 0x11, 0x18, &(0x7f0000000080)=0x9, 0x4) r4 = accept(r0, 0x0, 0x0) write(r2, &(0x7f0000000100), 0x1ede5) shutdown(r2, 0x2) sendto$packet(r4, &(0x7f0000000040)='u', 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x1) close(0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 07:04:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@ipv6_newroute={0x1c, 0x18, 0x100, 0x70bd26, 0x0, {0xa, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) 07:04:46 executing program 4: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14, 0x1000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', r2}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) getpeername$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @initdev}, &(0x7f0000000300)=0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4(r4, &(0x7f0000000340)=@nl, &(0x7f00000003c0)=0x80, 0x400) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000400)) write$P9_RMKNOD(r3, &(0x7f0000000440)={0x14, 0x13, 0x2, {0x20, 0x1, 0x7}}, 0x14) ioctl$sock_netdev_private(r3, 0x89f7, &(0x7f0000000480)) syz_emit_ethernet(0x9d, &(0x7f00000004c0)={@random="79ec95f6bc8e", @broadcast, [], {@llc_tr={0x11, {@snap={0x1ff, 0xaa, "c189", "6ea6ec", 0x4, "530189ca20d5bace2bf613bb58ff30dd4d06ffc824792a57d295e5cab8b993ccbe92161d65a1370f3508244e4f95f2f375f4be226f8c0b5b16408d171a46ce1cc759118ebb2997af9f4b1e448e54f57fcb64df2caacd53a4286f1e9c149a6aef90a85c1499480cebbfd083b66c62f7c2568c19f0358f449f29a89e73c67c1c7dd527ac9ea041"}}}}}, &(0x7f0000000580)={0x1, 0x2, [0x826, 0x462, 0x677, 0x3d2]}) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000005c0)=0xbf37ee1a566e3a48) ioctl$KDDISABIO(r3, 0x4b37) setsockopt(r4, 0x5, 0x9, &(0x7f0000000600)="8d3a4299a430f318257a1c9db6efcb1deec939b0b815d66be7bd584b28e2ad2c509ad9ee5d882204d2c0c101e161f8cdeb78d05da2d7b245dc43da014514e6b22c76cd72e37b2464c1f16598349ad4c9e6fe3a0f11feb7ee4c2a26e2571153b1c9b08a57023a8ed287a560da275e7dee460ef3e2a8afc2c3a026b7ccedf70fb62f7cfc930e44cb020abc180fb9eb9b343f1cec4f74083631aab024ce725ee61996b307adeb51b8bdfd6c847af77328eaa8265146f4082c551ba4aceb4df9c1e26b7741b2b62623797b749099ba713f23b9b65e53bec880773fe7292a793ca13fb0bd89b0314c", 0xe6) syz_genetlink_get_family_id$team(&(0x7f0000000700)='team\x00') r6 = syz_open_dev$dspn(&(0x7f0000000740)='/dev/dsp#\x00', 0x6, 0x2000) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/dlm_plock\x00', 0x120000, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000007c0)={0x2, r7}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x250, 0x1b8, 0x0, 0x0, 0x0, 0x0, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, &(0x7f0000000800), {[{{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@multicast2, @broadcast, 0x0, 0xff, 'syzkaller1\x00', 'irlan0\x00', {0x7f}, {0xff}, 0xff, 0x1, 0x9}, 0x0, 0x98, 0xe0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz1\x00', 0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r9 = dup2(r6, r1) getsockopt$nfc_llcp(r9, 0x118, 0x2, &(0x7f0000000b00)=""/30, 0x1e) semget(0x0, 0x4, 0x0) r10 = socket$vsock_dgram(0x28, 0x2, 0x0) setsockopt$sock_void(r10, 0x1, 0x9, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000b40)='numa_maps\x00') setsockopt$inet_sctp6_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000000b80)={0x0, 0x4, 0x3, 0x4, 0x1c, 0x7}, 0x14) r12 = syz_open_dev$vbi(&(0x7f0000000bc0)='/dev/vbi#\x00', 0x1, 0x2) r13 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/net/pfkey\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r12, 0x4, &(0x7f0000000c00)='{\x00', &(0x7f0000000c40)='./file0\x00', r13) 07:04:46 executing program 2: get_thread_area(&(0x7f0000000140)={0x9, 0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82100, 0x0, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) r1 = openat$cgroup_ro(r0, 0x0, 0x2761, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000080)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\xf6\xff\xff\xff\xff\xff\xff\xff\x00\xe9\xd5\x00', 0x200091}) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='memory.stat\x00', 0x7a05, 0x1700) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000600)=@pptp, 0x80, &(0x7f0000002900)=[{&(0x7f0000000680)=""/88, 0x58}, {&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/155, 0x9b}], 0x5, &(0x7f0000002980)=""/105, 0x69}, 0x2000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000380)=r4, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001740)=ANY=[], 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 188.217892][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 188.217899][ T26] audit: type=1800 audit(1572764686.778:31): pid=8205 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16525 res=0 [ 188.448548][ T26] audit: type=1800 audit(1572764687.008:32): pid=8205 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16525 res=0 07:04:47 executing program 3: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = clone3(&(0x7f0000000300)={0x1000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), 0x9, 0x0, &(0x7f0000000280)=""/121, 0x79, &(0x7f0000000400)=""/242}, 0x40) ptrace$peek(0x1, r1, &(0x7f0000000340)) r2 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) r10 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x841c1, 0x40620, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r13, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r13, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r14 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) r15 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r18) r19 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r19, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r21) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r22) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895749d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r12], 0x2}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r11, @ANYRES32, @ANYRES32=r13, @ANYRES32, @ANYRES32=r11, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r14, @ANYBLOB="000000001ce557515bd84aaf7ede28c2d6601b24000000000000007fd1fcaf02000000", @ANYRES32=r15, @ANYRES32=0x0, @ANYRES32=r16, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r20, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r10, @ANYRES32, @ANYRES32=r10, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r11, @ANYRES32, @ANYRES32=r11, @ANYRES32=r11, @ANYRES32=r11, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB='\x00\x00\x00\x00'], 0x128, 0x4040040}, 0x4000000) lsetxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x1}, [{0x2, 0x0, r0}, {0x2, 0xd, r2}, {0x2, 0x0, r0}, {0x2, 0x1, r0}, {0x2, 0x4, r3}, {0x2, 0x6, r5}, {0x2, 0x1, r7}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x4, r9}, {0x2, 0x2, r0}], {0x4, 0x198fa5a4405d5f22}, [{0x8, 0x3c9b60323d4ea105, r20}], {0x10, 0x9}}, 0x7c, 0x4) setpriority(0x0, 0x0, 0xffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000040)=@nullb='[d]:],0::6:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 07:04:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0xffff}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4001fa) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f20f23a00f20c035040000000f22c0470f01f836642e260ffd8db6490000440f20c0350d000000440f22c04f99c46221bea8fb36909566b8ff000f00d065460f77b9800000c00f3235000400000f30", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$PERF_EVENT_IOC_QUERY_BPF(r7, 0xc008240a, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000000000000000000000000000000d41accde8232f5d801000000602d84545310000000010000008e988a292267d0a872f89cc8d9b7b587ff3268f0dfead141f602e54fc48558c470612f0a99609c64ffedf8a046312d4a00f6d6b29fe874c37b1755205973d4e69f95f066749f282537e0a8102255e3f211b9de7c5d1490eaa5626f1668162749332fe14a3d6d2209e69a09a99c76ff8b9601f45c674bb4c8dcac53340dfceed0c1478d86be70b1882ba602f44528378bb2bd054aa873214eca3c018a64bf0e027aeccc8d19b5879ca7bfb7fcbe9f4063d05ab922d31b5eec3ae78bbc581ff527919d7ac9"]) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0xfffffffffffffffa) [ 188.559964][ T8220] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 07:04:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r7, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r12) r13 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r15) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r16) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r6], 0x2}], 0x1, &(0x7f00000017c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r7, 0xffffffffffffffff, r5]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r14}}}, @rights={{0x1c, 0x1, 0x1, [r4, 0xffffffffffffffff, r4]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r5, r5, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r15}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r16}}}], 0x128, 0x4040040}, 0x4000000) r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r18 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r20 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r20, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r20, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r21 = socket$rxrpc(0x21, 0x2, 0xa) r22 = syz_open_procfs(0xffffffffffffffff, 0x0) r23 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r23, 0xae80, 0x0) r24 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r27) r28 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r28, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r30) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r31) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r19], 0x2}], 0x1, &(0x7f00000017c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r18, 0xffffffffffffffff, r20, r21, r18]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r22, r23]}}, @cred={{0x1c, 0x1, 0x2, {r24, 0x0, r25}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r29}}}, @rights={{0x1c, 0x1, 0x1, [r17, 0xffffffffffffffff, r17]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r18, 0xffffffffffffffff, r18, r18, r18]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r30}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r31}}}], 0x128, 0x4040040}, 0x4000000) r32 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r33 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r35 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r35, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r35, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r36 = socket$rxrpc(0x21, 0x2, 0xa) r37 = syz_open_procfs(0xffffffffffffffff, 0x0) r38 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r38, 0xae80, 0x0) r39 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r41 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r42) r43 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r43, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r45) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r46) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r34], 0x2}], 0x1, &(0x7f00000017c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r33, 0xffffffffffffffff, r35, r36, r33]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r37, r38]}}, @cred={{0x1c, 0x1, 0x2, {r39, 0x0, r40}}}, @cred={{0x1c, 0x1, 0x2, {r41, r42, r44}}}, @rights={{0x1c, 0x1, 0x1, [r32, 0xffffffffffffffff, r32]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r33, 0xffffffffffffffff, r33, r33, r33]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r45}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r46}}}], 0x128, 0x4040040}, 0x4000000) getgroups(0x8, &(0x7f0000000080)=[0xffffffffffffffff, 0xee00, r25, 0x0, r44, 0x0, 0xee00, 0x0]) r48 = getgid() r49 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r50 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r52 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r52, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r52, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r53 = socket$rxrpc(0x21, 0x2, 0xa) r54 = syz_open_procfs(0xffffffffffffffff, 0x0) r55 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r55, 0xae80, 0x0) r56 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r58 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r59) r60 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r60, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r62) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r63) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r51], 0x2}], 0x1, &(0x7f00000017c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r50, 0xffffffffffffffff, r52, r53, r50]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r54, r55]}}, @cred={{0x1c, 0x1, 0x2, {r56, 0x0, r57}}}, @cred={{0x1c, 0x1, 0x2, {r58, r59, r61}}}, @rights={{0x1c, 0x1, 0x1, [r49, 0xffffffffffffffff, r49]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r50, 0xffffffffffffffff, r50, r50, r50]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r62}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r63}}}], 0x128, 0x4040040}, 0x4000000) getresgid(&(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)=0x0) r65 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r66 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r68 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r68, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r68, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r69 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r69, 0xae80, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)) r70 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r71) r72 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r72, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r72, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r74) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r75) r76 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r76, 0x4c80, 0x0) r77 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r77, 0x40044591, &(0x7f00000000c0)=0x5) r78 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r78, 0x4c80, 0x0) r79 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r79, 0x4c80, 0x0) r80 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r80, 0x40044591, &(0x7f00000000c0)=0x5) r81 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r81, 0x4c80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r67], 0x2}], 0x1, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r66, 0xffffffffffffffff, r68, r23, r66]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r69]}}, @rights={{0x28, 0x1, 0x1, [r76, r77, r78, r79, r80, r81]}}, @cred={{0x1c, 0x1, 0x2, {r70, r71, r73}}}, @rights={{0x1c, 0x1, 0x1, [r65, 0xffffffffffffffff, r65]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r66, 0xffffffffffffffff, r66, r66, r66]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r74}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r75}}}], 0x130, 0x4040040}, 0x4000000) r82 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r83 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r85 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r85, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r85, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r86 = socket$rxrpc(0x21, 0x2, 0xa) r87 = syz_open_procfs(0xffffffffffffffff, 0x0) r88 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r88, 0xae80, 0x0) r89 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r91 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r92) r93 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r93, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r93, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r95) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r96) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r84], 0x2}], 0x1, &(0x7f00000017c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r83, 0xffffffffffffffff, r85, r86, r83]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r87, r88]}}, @cred={{0x1c, 0x1, 0x2, {r89, 0x0, r90}}}, @cred={{0x1c, 0x1, 0x2, {r91, r92, r94}}}, @rights={{0x1c, 0x1, 0x1, [r82, 0xffffffffffffffff, r82]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r83, 0xffffffffffffffff, r83, r83, r83]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r95}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r96}}}], 0x128, 0x4040040}, 0x4000000) r97 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r98 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r100 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r100, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r100, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r101 = socket$rxrpc(0x21, 0x2, 0xa) r102 = syz_open_procfs(0xffffffffffffffff, 0x0) r103 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r103, 0xae80, 0x0) r104 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r106 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r107) r108 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r108, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r108, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r110) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r111) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r99], 0x2}], 0x1, &(0x7f00000017c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r98, 0xffffffffffffffff, r100, r101, r98]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r102, r103]}}, @cred={{0x1c, 0x1, 0x2, {r104, 0x0, r105}}}, @cred={{0x1c, 0x1, 0x2, {r106, r107, r109}}}, @rights={{0x1c, 0x1, 0x1, [r97, 0xffffffffffffffff, r97]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r98, 0xffffffffffffffff, r98, r98, r98]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r110}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r111}}}], 0x128, 0x4040040}, 0x4000000) r112 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r113 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r115 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r115, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r115, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r116 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r116, 0xae80, 0x0) r117 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r119 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r120) r121 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r121, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r121, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r123) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r124) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r114], 0x2}], 0x1, &(0x7f00000017c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r113, 0xffffffffffffffff, r115, 0xffffffffffffffff, r113]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r116]}}, @cred={{0x1c, 0x1, 0x2, {r117, 0x0, r118}}}, @cred={{0x1c, 0x1, 0x2, {r119, r120, r122}}}, @rights={{0x1c, 0x1, 0x1, [r112, 0xffffffffffffffff, r112]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r113, 0xffffffffffffffff, r113, r113, r113]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r123}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r124}}}], 0x128, 0x4040040}, 0x4000000) r125 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r126 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r128 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r128, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r128, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r129 = socket$rxrpc(0x21, 0x2, 0xa) r130 = syz_open_procfs(0xffffffffffffffff, 0x0) r131 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r131, 0xae80, 0x0) r132 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r134 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r135) r136 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r136, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r136, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r138) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r139) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r127], 0x2}], 0x1, &(0x7f00000017c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r126, 0xffffffffffffffff, r128, r129, r126]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r130, r131]}}, @cred={{0x1c, 0x1, 0x2, {r132, 0x0, r133}}}, @cred={{0x1c, 0x1, 0x2, {r134, r135, r137}}}, @rights={{0x1c, 0x1, 0x1, [r125, 0xffffffffffffffff, r125]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r126, 0xffffffffffffffff, r126, r126, r126]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r138}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r139}}}], 0x128, 0x4040040}, 0x4000000) getgroups(0x8, &(0x7f00000002c0)=[r75, 0xee00, r94, 0xffffffffffffffff, r111, r118, r133, 0xee00]) setgroups(0x8, &(0x7f0000000300)=[r2, r3, r14, r47, r48, r63, r64, r140]) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x525, &(0x7f0000000200)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9206ac3d78578125082f4fcc477cb57f5650731dfaf12aa77ad43cb41f04b15a9fdd6c1610c621c85fe3e348527b0"], 0x18}}, 0x0) r141 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r141, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") close(r0) 07:04:47 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xe, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0xfffffe2b}, 0x70) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x102, 0x0, [0x81, 0xf16, 0x1, 0x8]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000040)={{0x9032df7df8309777, 0x0, @descriptor="79afb1fb74ce884a"}}) 07:04:47 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x605, r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000240)={0x9, 0x7, 0x9, 'queue0\x00', 0x6}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b479a7316270146d0e02f8e63ba8863cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@resgid={'resgid', 0x3d, 0xee01}}]}) 07:04:47 executing program 3: r0 = creat(0x0, 0x0) vmsplice(r0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000640)}, {&(0x7f0000000740)="8190da5bad", 0x5}, {&(0x7f0000000780)="2e98b8e24d53dec91b6964d046c82e9ca32afbe4a350141117840a5c89", 0x1d}], 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r1, r2, 0x0, 0x320f) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) pipe(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x30005, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80080, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='syz1\x00') fcntl$getflags(0xffffffffffffffff, 0x40a) lseek(0xffffffffffffffff, 0x800002, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) getxattr(&(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000a00)=""/87, 0x57) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00'}) ioctl$UI_ABS_SETUP(r5, 0x401c5504, 0x0) pipe(&(0x7f0000000080)) prctl$PR_SET_FPEMU(0xa, 0x0) 07:04:47 executing program 4: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b7}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) shutdown(0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r4, 0x10099b7) fallocate(r1, 0x4000000000000010, 0x7a9a, 0x7fff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x8400fffffffa) 07:04:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x88) ioctl$VT_ACTIVATE(r1, 0x5606, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) setsockopt$inet_udp_int(r3, 0x11, 0x18, &(0x7f0000000080)=0x9, 0x4) r4 = accept(r0, 0x0, 0x0) write(r2, &(0x7f0000000100), 0x1ede5) shutdown(r2, 0x2) sendto$packet(r4, &(0x7f0000000040)='u', 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x1) close(0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 189.016728][ T8252] EXT4-fs (loop2): Unsupported filesystem blocksize 0 (1923657432 log_block_size) 07:04:47 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r2 = dup3(r0, r0, 0x180000) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r1, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) [ 189.149338][ T26] audit: type=1804 audit(1572764687.708:33): pid=8260 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir064734729/syzkaller.nMwMW2/4/bus" dev="sda1" ino=16529 res=1 [ 189.205169][ T8266] EXT4-fs (loop2): Unsupported filesystem blocksize 0 (1923657432 log_block_size) 07:04:48 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="6f68fde88b508405c8647cfc00b3dd647f450000000000000000fb0000000000004029588171101000720555fd36f6b8209bbe0b00001600380001000900ff030100029ebd55aff5c6b58d590a1ffe7e27e640f1b6d24c6691065e7cf04c07f07182831f76bd4c0a9a7489b56e76ba7aeca1c7d424ec84edd2d158237dc33d221e0b86d596520b53af3a28632b0a2fe078e60d6b45cad81644af33ff184f267af1b4696f95960684ac70"], 0x45) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000000)={0x0, &(0x7f0000000140)=""/248}) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 07:04:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) sendto$inet6(r0, &(0x7f0000000080)="0304ff0f0000600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x6c, 0x20000000, 0x0, 0x11) 07:04:48 executing program 1: socket(0x200000000010, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0xa1493c1701022a07) lgetxattr(0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000280)={0x4, 0xffffffff, 0x7ff, 0x42}) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') r1 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x3, 0x1) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000340)={@loopback, @initdev}, &(0x7f0000000900)=0xa) add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080), &(0x7f0000000300), 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1dcc11275f852e7e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x20000a01c, 0x2, 0x6, 0x0, 0x0, 0x7, 0x2000}, 0x0, 0x1000000000000002, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000)) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000200)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x9, &(0x7f0000000b80)=[{&(0x7f00000003c0)="dbba6915fbce9bc095d5126135acbad8fed3770db549369e743841e1088ddb25e2f400e6903fa4f7f55964724e2c38ee43ce328d1bd3912e2c61771f63a7408952a973fab163a6a652eb5a0fddf63b6b59a4939736309d26d1e6b7e6cfd0709fccb01135fcb94933211c418848e070927fc352a794", 0x75, 0x200}, {&(0x7f0000000600)="c64cea3eabda4387a79a19e36270019126a03bfc54bbfa42ade44f02241b2f901d5d6e888ae82c2ce4c7b2cfd404b63c0d88b1fff42f2c4e24e63c932b43c597bfc61aafdef9f7593991e3f8a888cb3bdbd7d6b3a143e17257f8cda88c5ae06837e8f15791e9c64b8211798e8e52c4087edabae715221c12f34bea0e1b2b652316059af20a26234a52f8caf1c1b3279026732b920e593ec5c57ae621845003bccd27af8591e7acd6a8849f9839fe53dfec558c972bdfd6e80d1d5e689f08ef9ef734", 0xc2, 0x5}, {&(0x7f0000000740)="6d704f08e555228efd811d8cb1fed5b4ad7e5737668452e248fdf1ebccae6ee201cd05dff6e3b35c5e8eb32879263acfaec890873d89d84f4dc1e8d362d60239ddda63e3e29124378122c7b08349956de28a7b944ea449bbb1718bc5b5375d3d5e626906efb99873985bfc0709b2897c38faf544", 0x74, 0x10001}, {&(0x7f00000007c0)="bbaeb9096f44ec58ede3eb51d951ba0c7c7d765d4facfbdcff97cb802eb93beb4abd7da615466ccfc1e6b7abe45a7d1e8e26687ac7f51c16377efcb6751b65f9076a757b3ddc5c11428a20ee54684fcf0f86a73c1bd3fc3a31974207ca44c80170db748ff41940292de9ed451d5ba47d1a2e219662ff9330e948143992", 0x7d, 0x9}, {&(0x7f00000001c0)="3eaf5ac777898c10d40c411ad72628721eb040", 0x13, 0x1ff}, {&(0x7f0000000840)="7f9a95498390b96c123f2be01b75fea115e40d56390fe7e883bfd93f528e99b8b8cb32c4082c03d66ac2c6921cf375ef366830653f52824689d2ad892b96c162e7ef3cc0cee58a7245dfb415550422fce6d4830e44194fd5c029373f496d3103c2fcbc9e553b7e8c8cced4c88d8d97ae74b7684da8b5c8851bb32fd58f842bfd9324189040b21d", 0x87, 0x3}, {&(0x7f0000000940)="75362ef7a2cca939629c5fde4326346f42a94a72ee1b499bfad3524407adb66a4b92472b51b10f691f22a902513a9d3261462849188a35c35bc8750c6e18bb6b88a974c7d441388074209264d1de9daf456bc99d3f9a25f15157386723ce21a8d3a1697bf365225adabfeb8e8e2603de3364642a1ff263e06368155506c2fcc744704d", 0x83, 0x1}, {&(0x7f0000000a00)="29df67da65ac5daa77be68acef720e3ac76f1566d77e6e70a1c6e9902ca735f27461f6e0372f472c57aad5a0b54738d86918d02fa6b748bf379b9dba18054b0fc52727b20741d0d06bc9d55114240f33891d87c6f371e6583e91ab842edd790864db1c96b161f06eb0ae9442b18b985aa95234529c400875930107a20bd500c1452ad7a9914239ac936b550436af291b34d2779f223b78f532c6aae9118d4758159b0f429dd0e706400135c0f6fbc10d0594532a8c583edec39fa668", 0xbc, 0x6}, {&(0x7f0000000ac0)="9cd2f756d267f16ee988a44f35074a10b5381acdd39232170690420788d5341e99ea87a1da0cdff730417f6c1d4a0b7ce28f52ae42eb0b663ac6601a94ff575cd006c4c8b44cc1d40995ab320ea6162584360a2a78d99955cbab82a3f782dca9a7165cd4f6171bda2840876fac7c0071caec78491e53801df350f6cd676a00828919d93fc759cde5204ad172", 0x8c, 0xff}], 0x2000000, &(0x7f0000000c80)={[{@quota_quantum={'quota_quantum', 0x3d, 0x2}}, {@norecovery='norecovery'}, {@lockproto_dlm='lockproto=dlm'}, {@quota_account='quota=account'}, {@data_ordered='data=ordered'}], [{@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/midi#\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}) [ 189.981362][ T26] audit: type=1804 audit(1572764688.538:34): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir064734729/syzkaller.nMwMW2/4/bus" dev="sda1" ino=16529 res=1 [ 190.065464][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 190.071438][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 190.073088][ T8271] syz-executor.5 (8271) used greatest stack depth: 23248 bytes left [ 190.083302][ T8295] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 190.134970][ T26] audit: type=1804 audit(1572764688.588:35): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir064734729/syzkaller.nMwMW2/4/bus" dev="sda1" ino=16529 res=1 [ 190.161342][ T26] audit: type=1804 audit(1572764688.588:36): pid=8285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir064734729/syzkaller.nMwMW2/4/bus" dev="sda1" ino=16529 res=1 07:04:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000110000000000000081006263736630000000000800000000000073697430000002000000ffff00000000626f6e64300000000000000000000000766574382d863573e35cea0000000000ffffffffffff0000000000000000000000000000000000000000d0000000d000000000010000766c616e000000ff03000000000000000000000000000000000000000000000008000000000000000100000000000100766c616e000000000000000000000000000000000000000000000000000000000800000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff01000000030000000000000000006970365f76746930000000000000000073797a6b616c6c6572300000000000006263736630000000000000000000000076657468305f746f5f7465616d000000aaaaaaaaaabb000000000000aaaaaaaaaaaa00000000000000007000000070000000a8000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x2b0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) r2 = inotify_init1(0x0) r3 = gettid() fcntl$setown(r2, 0x8, r3) r4 = getpgid(r3) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x80) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x8, 0x1f, 0x40, 0x0, 0x4, 0x4000, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000300), 0x8}, 0x210, 0x7, 0x200, 0x6, 0x354c, 0x3, 0x9}, r4, 0xb, r5, 0xe) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000240)={&(0x7f0000000000), &(0x7f0000000040)=""/152, 0x98}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00@\x00\x00\x00P\xe0\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x2, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) 07:04:48 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7f, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x3f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000700000025000000000000a39500000000000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$TIOCCONS(r3, 0x541d) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) [ 190.396003][ T8310] ebtables: ebtables: counters copy to user failed while replacing table [ 190.448733][ T8310] ebtables: ebtables: counters copy to user failed while replacing table 07:04:49 executing program 0: syz_mount_image$exfat(&(0x7f0000001780)='exfat\x00', &(0x7f00000017c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="666d61736b3d957c893a17ba6d504f94205699c690f7db49303030303030303030303034303030303030303030302c0000000000000000"]) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x480082, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@routing={0x2, 0xa, 0x1, 0x1, 0x0, [@remote, @remote, @mcast2, @dev={0xfe, 0x80, [], 0x10}, @rand_addr="f222598fed93e0c82fac1085804c1fea"]}, 0x58) 07:04:49 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000180)=0x14) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14, 0x400) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000380)=0x1, 0x4) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000108000000000000000000020000d143224c538992d4093c37cde1086c53e78d6a937422e1ca4cd12770e7a936af13a6c7e6c4541ec804c1d7a22f04", @ANYRES32=0x0, @ANYBLOB="ffffffef00000000"], 0x20}}, 0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x200, 0x901) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) mmap$IORING_OFF_CQ_RING(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x1000005, 0x40011, r3, 0x8000000) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000200), &(0x7f0000000240)=0x1) 07:04:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xf7d, @loopback, 0x8}, r1}}, 0x30) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x0, 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x800, 0x298900) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0x42000) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x101, 0xfffe}, 0x8) 07:04:49 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="6f68fde88b508405c8647cfc00b3dd647f450000000000000000fb0000000000004029588171101000720555fd36f6b8209bbe0b00001600380001000900ff030100029ebd55aff5c6b58d590a1ffe7e27e640f1b6d24c6691065e7cf04c07f07182831f76bd4c0a9a7489b56e76ba7aeca1c7d424ec84edd2d158237dc33d221e0b86d596520b53af3a28632b0a2fe078e60d6b45cad81644af33ff184f267af1b4696f95960684ac70"], 0x45) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000000)={0x0, &(0x7f0000000140)=""/248}) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 07:04:49 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getpriority(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x16f) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x10000, 0x10042) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:49 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) semget(0x2, 0x0, 0xef9190a9a75d0eee) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) bind$ax25(r2, &(0x7f0000000140)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x457, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", ' \x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 190.855053][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:04:49 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x482000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000002c0)=""/4096) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0x4) [ 190.922939][ T8332] [EXFAT] Unrecognized mount option fmask=•|‰:ºmPO” V™Æ÷ÛI0000000000040000000000 or missing value 07:04:49 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x4e23, @rand_addr=0xb967}}) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0x41000000000004, 0x1}) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) [ 191.009675][ T8332] [EXFAT] Unrecognized mount option fmask=•|‰:ºmPO” V™Æ÷ÛI0000000000040000000000 or missing value 07:04:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000240)={0x5c000000, 0x0, "df06360b546814b56b540a5af437f819862e278aeda9ff5254020f8b6e353f6d"}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) 07:04:49 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="6f68fde88b508405c8647cfc00b3dd647f450000000000000000fb0000000000004029588171101000720555fd36f6b8209bbe0b00001600380001000900ff030100029ebd55aff5c6b58d590a1ffe7e27e640f1b6d24c6691065e7cf04c07f07182831f76bd4c0a9a7489b56e76ba7aeca1c7d424ec84edd2d158237dc33d221e0b86d596520b53af3a28632b0a2fe078e60d6b45cad81644af33ff184f267af1b4696f95960684ac70"], 0x45) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000000)={0x0, &(0x7f0000000140)=""/248}) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 07:04:49 executing program 3: syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000000c0)=0x2a) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x1000002, 0x8012, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) read$usbmon(r1, &(0x7f0000000000)=""/87, 0x57) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) 07:04:49 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) getdents(r3, &(0x7f0000000180)=""/98, 0x62) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r4) 07:04:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000240)={0x5c000000, 0x0, "df06360b546814b56b540a5af437f819862e278aeda9ff5254020f8b6e353f6d"}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) 07:04:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x115) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e50d00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000e208000100686866000c000200080002"], 0x3}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e24, 0x0, 0x4e22, 0x6, 0x2, 0xc0, 0xc0, 0xc, r3, r5}, {0x0, 0xfff, 0xb67, 0x10000, 0xcd2dfec, 0x3, 0x3, 0x2}, {0x9, 0xc, 0x8001, 0x80000000}, 0x7f, 0x6e6bbd, 0x0, 0x3, 0x7, 0x3}, {{@in6=@mcast1, 0x4d6, 0x6c}, 0x2, @in=@loopback, 0x0, 0x6, 0x2, 0x7, 0xa0b, 0x5}}, 0xe8) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000100)=0x1000, 0x71) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) recvmsg(r0, &(0x7f0000000040)={&(0x7f00000001c0)=@nl=@proc, 0x80, 0x0, 0x0, 0x0, 0x1de}, 0x40012002) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000240)={0x0, @pix={0x0, 0x7fffffff, 0x47504a4d, 0x8, 0x7ff, 0x0, 0x4, 0x373, 0x0, 0x0, 0x3, 0x5}}) 07:04:50 executing program 2: creat(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="fc0100000000000000000000000000008500000400000000a800000000000000"], &(0x7f0000000140)='G\xc3$\x05ju\xc3PL\x00\x94\xf7\x1a#\x85x\xa2Br{\xf8\xff\xff\xff\xff\xff\xff\xffk\x9d\xde\xf2\x01\x00\x00\x00\x00\x00\x00\x00c(\xf2]\x1d', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x3, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@RTM_NEWNSID={0x2c, 0x58, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044840}, 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={@rand_addr, @multicast1}, 0xc) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000180), &(0x7f00000000c0)=0x68) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000440)=ANY=[]) 07:04:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000700)="260181ed2420b8cc25ad2e49a3a7a0192a0716f94b1b38a0e528e87d17b7ff65ea42220d11cea5ce1f239af4498c4e9bc8508188f56886438403c76e3fee7706509d595442dc2185547132e6eecbf0ae60f9206adb141a2ce8611e21c8f6b77baa73cad629944c1bc34250d9ffcf13b4ed80b728ba7680edda39fcd21e636f68187f3a8fbab798a6bf495e3790b3497234", 0x91) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/video2\x00', 0x2, 0x0) r4 = dup3(r3, r1, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4400ae8f, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000001000080"]) dup2(r4, r2) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x7, @media='eth\x00'}}}}, 0x68}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 191.520740][ T8382] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 07:04:50 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x115) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e50d00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000e208000100686866000c000200080002"], 0x3}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'caif0\x00', r2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@loopback, @rand_addr="c2af940bf1810923a4a3277fc56d9b59", @ipv4={[], [], @rand_addr=0x4}, 0x5, 0x8db, 0x1, 0x700, 0x7fffffff, 0x10000, r3}) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x5, 0x3, 0x1, "035c2b9f622262fb3d2a0ce32d0358c07d748519b107feecc1aae593ddece018", 0x32525942}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x94, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbe77}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x92e3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffff80}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x80) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x2) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) fcntl$setlease(r5, 0x400, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x402, 0xfe) sendmmsg(r6, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0xa, 0x4e24, @multicast2}, 0x80, &(0x7f00000004c0)}}], 0x1, 0x0) 07:04:50 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) getdents(r3, &(0x7f0000000180)=""/98, 0x62) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r4) 07:04:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip6_vti0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x1, 0x0, @ipv4={[], [], @rand_addr=0xf8}}, 0x1c) connect$l2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 07:04:50 executing program 5: r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924924f0, 0x0) 07:04:50 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x2ab, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRESHEX, @ANYRES16=r2]}, 0x1, 0x0, 0x0, 0x40}, 0x200088d0) 07:04:50 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) getdents(r3, &(0x7f0000000180)=""/98, 0x62) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r4) 07:04:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:52 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequ \x00cer2\x00', 0x202c0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) delete_module(&(0x7f0000000140)='/dev/sequ \x00cer2\x00', 0x200) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @hyper, 0x3e00000000000000}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r6, @ANYBLOB="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"], 0x48}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f66616e733d67642c72461950b20fa510b16066646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) open(&(0x7f0000000080)='./file1\x00', 0x2, 0x8) 07:04:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip6_vti0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x1, 0x0, @ipv4={[], [], @rand_addr=0xf8}}, 0x1c) connect$l2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 07:04:52 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2948, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="f67f986af9dc3ba1fe8000000000000087209739ae649266f062bcd978b94585b9bf1100ed8bc3b5", 0x28}], 0x1}, 0x90) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000180)=0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) 07:04:52 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) getdents(r3, &(0x7f0000000180)=""/98, 0x62) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r4) 07:04:52 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000002c0), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) read(r3, &(0x7f0000000380)=""/209, 0xd1) r4 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x30) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000300)={0x2, 0x1, 0x5, {}, 0x7ff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RSTATFS(r6, &(0x7f0000000200)={0xfffffffffffffe72, 0x9, 0x2, {0x0, 0x0, 0xc1da, 0x4, 0x0, 0x0, 0xffffffff7fffffff}}, 0x43) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r7}, 0x10, &(0x7f00000000c0)={&(0x7f0000000180), 0x10}}, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x6, 0x6, 0x1f}}) 07:04:52 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x420000, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f0000000100)={0x78, 0x0, 0x1, {0x8000, 0x7, 0x0, {0x4, 0x6, 0x7f, 0x9, 0x6, 0xadac, 0x5, 0x20, 0x8, 0x9, 0x0, r1, 0x0, 0x7, 0x7}}}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) dup3(0xffffffffffffffff, r2, 0x180000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 07:04:53 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) getdents(r3, &(0x7f0000000180)=""/98, 0x62) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fsync(r4) 07:04:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$getsig(0x4202, r1, 0x4, &(0x7f0000000240)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1f", 0x7}], 0x1, 0x1) close(r3) splice(r2, 0x0, r3, 0x0, 0x100000000, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x282000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="c744240039000000c74424022f0a0000ff2c2466baf80cb854904880ef66bafc0cb800000100ef36f3c1df6b65660f388061360fbb71dbc4627d0f4e07c423394c43050048b889000000000000000f23d00f21f835200000040f23f8480fc72166baf80cb84c488680ef66bafc0cb8a1a327b1ef", 0x74}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) r5 = accept(r0, 0x0, 0x0) write(r4, &(0x7f0000000100), 0x1ede5) shutdown(r4, 0x2) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000140)=""/73) sendto$packet(r5, &(0x7f0000000040)='u', 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 07:04:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000008302a01f200009f086ff10001000800010062706600000000000000000000000000000000fa75"], 0x28}}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000004c0)={0x949b, 0x5, 0x1000}, 0x4) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x115) setsockopt$inet6_group_source_req(r1, 0x29, 0x5b71e95e24d138d5, &(0x7f00000002c0)={0x1, {{0xa, 0x4e20, 0xfffff801, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}, {{0xa, 0x4e24, 0x5, @remote, 0x80000001}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000f2400accc0100000000004f4da01749b4", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000e208000100686866000c000200080002"], 0x3}}, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f00000000c0)=0x5) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1001910}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r7, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lapb0\x00', r5}) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924924f0, 0x0) 07:04:53 executing program 4: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x115) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e50d00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000e208000100686866000c000200080002"], 0x3}}, 0x0) bind$packet(r3, &(0x7f0000000480)={0x11, 0x6, r6, 0x1, 0x7f, 0x6, @remote}, 0x14) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) ioctl$KDENABIO(r7, 0x4b36) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r9, 0x40044591, &(0x7f00000000c0)=0x5) sendmsg$nl_route_sched(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@newtclass={0x30, 0x28, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {0xfffa, 0xd}, {0xb, 0x1}}, [@tclass_kind_options=@c_sfb={0x8, 0x1, 'sfb\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f00000000c0)=0x5) write$P9_RMKDIR(r8, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x20, 0x2, 0x7}}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000005ffffa6fffff7", @ANYRES32=r4, @ANYBLOB="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"], 0x8d0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 07:04:53 executing program 4: r0 = socket(0xa, 0x802, 0x80000000088) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x73}) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) writev(r0, &(0x7f0000fb1000), 0xba) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0xfffffffffffffe15, 0x0}}], 0x183, 0x0, 0x0) 07:04:53 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) getdents(r3, &(0x7f0000000180)=""/98, 0x62) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fsync(r4) 07:04:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000008302a01f200009f086ff10001000800010062706600000000000000000000000000000000fa75"], 0x28}}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000004c0)={0x949b, 0x5, 0x1000}, 0x4) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x115) setsockopt$inet6_group_source_req(r1, 0x29, 0x5b71e95e24d138d5, &(0x7f00000002c0)={0x1, {{0xa, 0x4e20, 0xfffff801, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}, {{0xa, 0x4e24, 0x5, @remote, 0x80000001}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000f2400accc0100000000004f4da01749b4", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000e208000100686866000c000200080002"], 0x3}}, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f00000000c0)=0x5) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1001910}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r7, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lapb0\x00', r5}) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924924f0, 0x0) 07:04:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:53 executing program 2: getpid() sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x9a80998cc0211975, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, &(0x7f0000000100)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000080)=""/246) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) close(r0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:04:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:53 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x420000, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f0000000100)={0x78, 0x0, 0x1, {0x8000, 0x7, 0x0, {0x4, 0x6, 0x7f, 0x9, 0x6, 0xadac, 0x5, 0x20, 0x8, 0x9, 0x0, r1, 0x0, 0x7, 0x7}}}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) dup3(0xffffffffffffffff, r2, 0x180000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 07:04:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$getsig(0x4202, r1, 0x4, &(0x7f0000000240)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1f", 0x7}], 0x1, 0x1) close(r3) splice(r2, 0x0, r3, 0x0, 0x100000000, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x282000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="c744240039000000c74424022f0a0000ff2c2466baf80cb854904880ef66bafc0cb800000100ef36f3c1df6b65660f388061360fbb71dbc4627d0f4e07c423394c43050048b889000000000000000f23d00f21f835200000040f23f8480fc72166baf80cb84c488680ef66bafc0cb8a1a327b1ef", 0x74}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) r5 = accept(r0, 0x0, 0x0) write(r4, &(0x7f0000000100), 0x1ede5) shutdown(r4, 0x2) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000140)=""/73) sendto$packet(r5, &(0x7f0000000040)='u', 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 07:04:53 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) getdents(r3, &(0x7f0000000180)=""/98, 0x62) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fsync(r4) 07:04:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000180)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$getsig(0x4202, r1, 0x4, &(0x7f0000000240)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1f", 0x7}], 0x1, 0x1) close(r3) splice(r2, 0x0, r3, 0x0, 0x100000000, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x282000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="c744240039000000c74424022f0a0000ff2c2466baf80cb854904880ef66bafc0cb800000100ef36f3c1df6b65660f388061360fbb71dbc4627d0f4e07c423394c43050048b889000000000000000f23d00f21f835200000040f23f8480fc72166baf80cb84c488680ef66bafc0cb8a1a327b1ef", 0x74}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) r5 = accept(r0, 0x0, 0x0) write(r4, &(0x7f0000000100), 0x1ede5) shutdown(r4, 0x2) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000140)=""/73) sendto$packet(r5, &(0x7f0000000040)='u', 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 07:04:54 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) getdents(r3, &(0x7f0000000180)=""/98, 0x62) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(0xffffffffffffffff) 07:04:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$getsig(0x4202, r1, 0x4, &(0x7f0000000240)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1f", 0x7}], 0x1, 0x1) close(r3) splice(r2, 0x0, r3, 0x0, 0x100000000, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x282000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="c744240039000000c74424022f0a0000ff2c2466baf80cb854904880ef66bafc0cb800000100ef36f3c1df6b65660f388061360fbb71dbc4627d0f4e07c423394c43050048b889000000000000000f23d00f21f835200000040f23f8480fc72166baf80cb84c488680ef66bafc0cb8a1a327b1ef", 0x74}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) r5 = accept(r0, 0x0, 0x0) write(r4, &(0x7f0000000100), 0x1ede5) shutdown(r4, 0x2) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000140)=""/73) sendto$packet(r5, &(0x7f0000000040)='u', 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 07:04:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) getpeername$netlink(r2, &(0x7f00000000c0), &(0x7f0000000140)=0xc) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_vif\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000600000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 07:04:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 196.344529][ T8534] EXT4-fs (loop2): invalid first ino: 0 07:04:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) perf_event_open(0x0, r1, 0x3, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a3a, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x2, 0x0) dup2(r2, r3) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r4, 0x9) fcntl$setsig(r2, 0xa, 0x3b) lsetxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.selinux\x00', &(0x7f00000002c0)='system_u:object_r:lib_t:s0\x00', 0x1b, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') fcntl$getownex(r5, 0x10, &(0x7f0000000100)={0x0, 0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pbkey\x00', 0x6c001, 0x0) getpid() clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r6, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$sock_inet6_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000300)) setuid(0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) 07:04:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:55 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) getdents(r3, &(0x7f0000000180)=""/98, 0x62) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(0xffffffffffffffff) 07:04:55 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="980200002400070500"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x298}, 0x1, 0x0, 0x0, 0x892}, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 07:04:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$getsig(0x4202, r1, 0x4, &(0x7f0000000240)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1f", 0x7}], 0x1, 0x1) close(r3) splice(r2, 0x0, r3, 0x0, 0x100000000, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x282000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="c744240039000000c74424022f0a0000ff2c2466baf80cb854904880ef66bafc0cb800000100ef36f3c1df6b65660f388061360fbb71dbc4627d0f4e07c423394c43050048b889000000000000000f23d00f21f835200000040f23f8480fc72166baf80cb84c488680ef66bafc0cb8a1a327b1ef", 0x74}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) r5 = accept(r0, 0x0, 0x0) write(r4, &(0x7f0000000100), 0x1ede5) shutdown(r4, 0x2) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000140)=""/73) sendto$packet(r5, &(0x7f0000000040)='u', 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 07:04:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @rand_addr="0000f407000000faafe700"}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) getgid() fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) close(0xffffffffffffffff) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x8b1dbd0f) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2, 0x0, @rand_addr="f1d62293bfc651b4ffff00"}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) inotify_init1(0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) sendmsg$TIPC_NL_PEER_REMOVE(r3, 0x0, 0x51) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x0) 07:04:55 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) getdents(r3, &(0x7f0000000180)=""/98, 0x62) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(0xffffffffffffffff) [ 196.716767][ T8553] ptrace attach of "/root/syz-executor.1"[7895] was attempted by "/root/syz-executor.1"[8553] [ 196.716772][ T8564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.765154][ T8574] ptrace attach of "/root/syz-executor.1"[7895] was attempted by "/root/syz-executor.1"[8574] 07:04:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getgid() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x1a, &(0x7f0000000280)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff407018f6aaa7b88615ff1956d43597ef5b8c0000010f2d12cf7000000000000095000000000000007c41776586b2841fb71916411c22f945aaba7d284e982e61d69a61c1ba7a53657b8dc7c5bb72290946131bc6470051a39eab7f8651b8ca20a6e7fae8bc5e5c4cd8cfc80275b46ecea5a34655b9b5b14dc60158bb04c4cd78fd387de6c51cc11505e90fbda6987c7507f92eb4ea3bf3ecabb2e88af64ea0ffaa34ba17d3a654f43fa9f1e551bd91777afec914c754e6f40d21a6cec94b48847ac4"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 07:04:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 196.873021][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 07:04:55 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r4) 07:04:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) perf_event_open(0x0, r1, 0x3, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a3a, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x2, 0x0) dup2(r2, r3) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r4, 0x9) fcntl$setsig(r2, 0xa, 0x3b) lsetxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.selinux\x00', &(0x7f00000002c0)='system_u:object_r:lib_t:s0\x00', 0x1b, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') fcntl$getownex(r5, 0x10, &(0x7f0000000100)={0x0, 0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pbkey\x00', 0x6c001, 0x0) getpid() clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r6, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$sock_inet6_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000300)) setuid(0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) 07:04:55 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) perf_event_open(&(0x7f00000000c0)={0x1, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x2}}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) r2 = open(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000180)=@ethernet={0x0, @broadcast}, 0x80) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) 07:04:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x5}, 0x16ac0, 0x42, 0x0, 0x0, 0x0, 0xfffffffb}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) close(r2) getsockname$ax25(r2, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r4, 0x115}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10002}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)={0x260, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x10, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf302}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @mcast1, 0xaf}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3796}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x100, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80000001, @empty, 0xff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x10000, @mcast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @local, 0x400}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x10000880}, 0x8008) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000240)={@l2={0x1f, 0x3, {0x5, 0x0, 0x0, 0x83, 0x81, 0x6}, 0x8, 0x3}, {&(0x7f0000000100)=""/162, 0xa2}, &(0x7f00000001c0), 0x8}, 0xa0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r5, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="85430d9853d46badf4852ba68de6028d17c9540747f6b8abdaa0998b24fe92315f84a12c3a13c5a903c658fa3381871f0915d3035eae813ef4e3a991314fe3746929d8024349627eed6780b94bb658ebda602a112e3e37e4daa17cfbf1fa73561e796102a367de25a7c46dba600d7d60915500018f5e76b1674c7d3fcf73661ba92979be4c2ef87661b6f32f615c96c1b2ac8faccc5ccb515a83a86ddc91b0b17a28a418b8aa4795d414214c97236b5cc4c25b387f89cc20cb5341e041ba7afd2c4591c460d2d1716e162d9217d7424688d805e45fa68ae6b7507315a90daac5aa37", 0xe2}], 0x1, &(0x7f0000000900)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14}}], 0xc8}}, {{&(0x7f00000004c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000003940)="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", 0x1000}, {&(0x7f0000000500)="99a9e87b1e7df5e5cc78d69ab901d14eb4b21db0c78fd1c89038", 0x1a}, {&(0x7f0000000ac0)="555c53d0f3a63a26c24631d85b1476ba39dcd038bb990065de9c54df472a225d5b8dcbfd0887513a44d123b46f77c2306183899de8048c024139186a36977fbba7a2b5e52f4f2cdb5eb8541eb1cbbb063a2d4ec1c3c9b57b6401e1218666b2b1d648cae1017cba28c57d8ba667a67e70a495f89bf4ab545a222bba025a1fae6a7fc499f0dddf315d1cf9f71d4bf389886fe5a6188d891f4d32a01db755", 0x9d}, {&(0x7f0000000b80)="fe0bf13489453ab6db901eb6ca0a7519a2a5176ef24c7aeb735822bc9c70a1696970781d2ffdee45ebf2d82317fcf0059ec04052fc153deb3837ca05e1b939e954d2c3874a73c6155b1238ddda7827eebaebecd554fc1c1c26de70357f161b7b998927f104f168265de8ff75ee90e16fb91c3c098591dc64058bdfc1c08d4bc2bd3039d403250799", 0x88}, {&(0x7f0000000c40)="4e06a22aa6ea3cfa0b793f822c8740e2ebbfbb60f9e298304ab5212889bcee9faa9e78c79b7982ea974456e4191ecaa5e372f7801c816cce54885dcff2b728372f1a83", 0x43}, {&(0x7f0000001040)="3cebc053abc80f230ba41c11bac02216818c5330971062619176055dcde8ce8033b2408b754edf8b72b15938d4892826519313f6325f18d47c0eb7c7137d833937545e0a1210e6d194ad1c59540734f1518385c4cc39be371cb1436dd6cb46bc97ff7488ca54bf06501e19216596367a0163d92dcddb3119ff61658ce070596add68f0a5e1119f4b88", 0x89}, {&(0x7f0000001100)="1af161d9759ee5ab9887d3590bdffc5be19a58af0fc3ba05e21d0662e007034cb82bff7c9446ff4eb22ac5b897c24b94a8e8fa9b74405ed830044e73d2e3cf7deee06a0604d6a3f3f45dff216c0c5bc15a7561ca314de36865e9b85a857fd82c8c151cf8cc52dd3e7f7ca6604fa201f7e8b1baf952a48aed89c2ae8e0b077f593ce066af5439f447", 0x88}, {&(0x7f0000000a40)="e147bf1493d4ea21a69f1e75", 0xc}, {&(0x7f0000004940)="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", 0x1000}], 0x9, &(0x7f00000019c0)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x40}}, @ip_retopts={{0x48, 0x0, 0x7, {[@rr={0x7, 0xf, 0x0, [@multicast2, @multicast2, @local]}, @rr={0x7, 0x27, 0x0, [@multicast1, @local, @empty, @rand_addr, @remote, @local, @empty, @dev, @remote]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback}}}], 0x98}}, {{&(0x7f0000000d00)={0x2, 0x0, @empty}, 0x10, &(0x7f0000001840)=[{&(0x7f0000001400)="a9ee10dfff49ea4146d1bcd3893e9ca8edc889fe37e2dc2ccedf72a32ae5ccb4d8f2860f919173020edbaa0fbec58f96a6b01c1b2be8fdac903711a631c08b00f3e853c17360d72f01ddf6b524b13c82ed545f085b9013692dab3bbd84a12dbb1677b6bbde51a4184237f7b86f82900b46072bee215b6259a5897c7bb4dfd89a97e69753046a90271383ade6de1c584cceba07ae4f1ece1d3f8db8550125a44d38824b454c452efb954889748308ac819ae9a78f1a7b59", 0xb7}, {&(0x7f00000014c0)="28f49fc4b974b10f16eb7caf75f51341bc2310d13ee8c0462a880a8256378f180cf1459968de8e3426908c43b18d", 0x2e}, {&(0x7f0000001500)="14927e1efee3f6a67d36f2031a096ca0f2d17ce6ea9ff0ed30899dcf24f40818a269fa627530fb0e40c498e098ae3602483728086a5af3157152ccbfce65786c92a99257e5162368f73ca3b045f870bf150013cff8792040b8728c1d6c98c7fa22", 0x61}, {&(0x7f0000001580)="2fcee66c809f34dc8e1fa1d9fd83c2161f55a854cb2bd7924860978d3bb51f5039a633e462ee8b5f1e569833dcd687c37195dfe079b3c8f4d6c2d8eb873ca98859f50e64761cdd780be6439ae89d98c8a14a31b45e130d90fe2ec4f9bc3ba6081cd949b7aada68d2e4a05d756c5240d7a467d3c24d7debec650c58eb5bf4e7431d798d798b4f5a04adfae657d81780bf70ebc29e987a5a8951cb26ff2e0df23795d58a92124b7be7a80c2fa517ada206bdfc4c18d71fd11a3d1678562d63b82501bcfa01893efc220c82fca28334f2b42a8ff2f003cb39281de38127e59d436c303b58", 0xe3}, {&(0x7f0000001680)="99c5eb0b5798e026791f1915c6b43d024dbe490571ad988dcb0b1bbbde578d2991a625f4fa3e58d4d8c78d1ddec56bca8976225fdb75633c1f6b04e7dea68bad07036028d33ab72182d4282b2d4375f3618e6df900a8f1a1661d6921b2fb0c62b174840dd37e1c48c7aa7c4249d0d8d7f40c79", 0x73}, {&(0x7f0000001700)="be99d91bb5f5a93a10ee2676bea96a827d5e69611e93900495fc7e80151c9815d2eee34c1dab93c1e4a8df4592ef88d49f3acc82db0410e07ef5e0811730a7cd36f470cd8e2af370eeb64978c8de847c0154b23f701720cfde589a767df196a4281f5924a0a7a3db33527870756b3e6df6f21d2dd611d3e67e38b3f1364e3f1fb25572db7470ba7afa852170b736ef736d7e0622fb6462e8768b24267abc6c6b2a5f44770310bc44ea300667c7b5a5647f1473b6aa0ca90ee12af9b59a2d0c9ca852374ef8882c1f8a03aa2124586224ac8b458ac6f7fd4ff9586dd569d99565e34a7867eb4c94247f19a3a786ddb816a805715e978a626b6d", 0xf9}, {&(0x7f0000001800)="0c4c08f6ec2c2bf67862aeca700db3822c1bc2da7c81b0f8705e497565e7", 0x1e}], 0x7, &(0x7f00000018c0)=[@ip_ttl={{0x14}}], 0x18}}], 0x3, 0x0) io_setup(0x200, &(0x7f0000000600)=0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f00000000c0)=0x5) io_cancel(r6, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x84eb, r7, &(0x7f0000000640)="53303951053357a26e64aac7a3e3fb4cf3d07530cee590c010396938", 0x1c, 0x9, 0x0, 0x2, r1}, &(0x7f0000000740)) clock_gettime(0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f00000000c0)=0x8) 07:04:55 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:04:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:55 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0xaaaaaaaaaaaad21, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) pipe(&(0x7f00000004c0)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="a3fd3e1b1777a7da4e2fadea189ec74e8994c6432f4832c369fba7b9ee2aaa70fa96c62c3710318136", 0x29, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x4801, 0x0) 07:04:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x5f5b0d16, 0x2a, 0x7fff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000000)=0x7fff, &(0x7f00000000c0)=0x3) [ 197.241040][ T8596] ptrace attach of "/root/syz-executor.1"[7895] was attempted by "/root/syz-executor.1"[8596] 07:04:56 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) perf_event_open(&(0x7f00000000c0)={0x1, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x2}}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) r2 = open(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000180)=@ethernet={0x0, @broadcast}, 0x80) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) [ 197.502280][ T8617] EXT4-fs (loop1): bad geometry: block count 1080 exceeds size of device (1 blocks) 07:04:56 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x5f5b0d16, 0x2a, 0x7fff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000000)=0x7fff, &(0x7f00000000c0)=0x3) 07:04:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:56 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:04:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:04:56 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:04:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 07:04:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x1d, 0x2dd, &(0x7f0000000140)=[{&(0x7f0000000980)="eb3c906d6b66732e666174000200010002000270fff8", 0x12, 0x4000000000000}], 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x100, 0x9}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x8202, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000180)) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x37, 0x7f, 0x4}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x102, 0x0) 07:04:56 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) perf_event_open(&(0x7f00000000c0)={0x1, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x2}}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) r2 = open(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000180)=@ethernet={0x0, @broadcast}, 0x80) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) 07:04:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:56 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000200)={0x7}, 0x7) fsync(r2) 07:04:56 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:04:57 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x9, 0x4) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="020182ffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 07:04:57 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000200)={0x7}, 0x7) fsync(r2) 07:04:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:57 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) delete_module(&(0x7f0000000040)='lowerdir', 0x107d5f54d550b6e8) pipe(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="15400000", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x54, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75726469723d422f66696c65302c6c6f7765726469723d627f66696c65302c776f726b6469723d2e2f66696c65315c0082f5699a3e32760913c52f7a2402c1d584c091d4dfc71fa0f61952d4b4ad7b2e5e65786b97e8813bb3a2b0e74b9ee4471e070c4600163401876aaa43111fbcc14605eece6a15102906c544"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000cc0)="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", 0x586, 0x20000c0, 0x0, 0x0) pipe(0x0) [ 198.661974][ T8685] loop1: p1 p2[EZD] p3 p4 [ 198.679568][ T8685] loop1: partition table partially beyond EOD, truncated 07:04:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000040001200100001006970366772657461700000002c00020014000700ff00000000000000000001000000000214000600fe8800000000000000000000000001"], 0x60}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000000)={{0x1, 0xe6, 0x3, 0x1, 0xf5}, 0x7, 0x3, 0xffff}) [ 198.710689][ T8695] overlayfs: unrecognized mount option "urdir=B/file0" or missing value 07:04:57 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:04:57 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_GET_KEEPCAPS(0x7) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000200)={0x7}, 0x7) fsync(r2) [ 198.781544][ T8685] loop1: p1 start 1 is beyond EOD, truncated [ 198.832071][ T8702] overlayfs: unrecognized mount option "urdir=B/file0" or missing value [ 198.850843][ T8685] loop1: p2 size 1073741824 extends beyond EOD, truncated 07:04:57 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:04:57 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev, 0x7}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x10000000000009, &(0x7f0000000180), 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='md5sum:&(\x00', 0xa) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000180)={@remote, 0x27}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, r3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 07:04:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 198.914712][ T8685] loop1: p3 size 1912633224 extends beyond EOD, truncated 07:04:57 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = socket(0x1, 0x2, 0x0) connect(r4, &(0x7f0000000180)=@ethernet={0x1, @broadcast}, 0x80) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000380)=@gcm_256={{0x303}, "28065f89ede122d3", "c999ffac2636d9751ea91a62138bdea8ea69fd4dfd24c69bf193d1444b41f958", "44ff3ebb", "51e116e4032dce4d"}, 0x38) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e23, @rand_addr=0x5}}) close(r3) io_cancel(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x53b97c1aabf7bb6f, 0x7, r2, &(0x7f0000000280)="33542ee49405be1f7bc970daf04dec516e290db647a2aa29d67e560407dc059578b5f18569e718a294d034fa50d76aae4925a51acb68a907ea41aefdd5a98417974c37", 0x43, 0x8, 0x0, 0x0, r2}, &(0x7f0000000340)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @dev}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x40) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x4000, 0x0) 07:04:57 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a') lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0xc07594a88faa500a) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x7, 0x2, {0x3, 'GPL'}}, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000600)) setns(r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x30, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7, 0x1, 0x8}}}}, 0x30}}, 0x0) alarm(0x401) socket$nl_route(0x10, 0x3, 0x0) [ 198.989512][ T8685] loop1: p4 size 32768 extends beyond EOD, truncated 07:04:57 executing program 1: close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x216380, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sched_yield() sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffdb9}, 0x1, 0x0, 0x0, 0x8c}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @local}]}, 0x2c}}, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0xffffffffffffffac, 0x10, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x0, 0x921a831a8118cd5c}, [@IFLA_AF_SPEC={0x18}, @IFLA_NET_NS_FD={0x8}, @IFLA_LINKMODE={0x8, 0x11, 0x1a}, @IFLA_IF_NETNSID={0x0, 0x2e, 0x3}, @IFLA_OPERSTATE={0x8, 0x10, 0xa2}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 07:04:57 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:04:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:58 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev, 0x7}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x10000000000009, &(0x7f0000000180), 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='md5sum:&(\x00', 0xa) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000180)={@remote, 0x27}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, r3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 07:04:58 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a') lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0xc07594a88faa500a) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x7, 0x2, {0x3, 'GPL'}}, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000600)) setns(r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x30, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7, 0x1, 0x8}}}}, 0x30}}, 0x0) alarm(0x401) socket$nl_route(0x10, 0x3, 0x0) 07:04:58 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:04:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:58 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev, 0x7}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x10000000000009, &(0x7f0000000180), 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='md5sum:&(\x00', 0xa) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000180)={@remote, 0x27}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, r3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 07:04:58 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:04:58 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = socket(0x1, 0x2, 0x0) connect(r4, &(0x7f0000000180)=@ethernet={0x1, @broadcast}, 0x80) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000380)=@gcm_256={{0x303}, "28065f89ede122d3", "c999ffac2636d9751ea91a62138bdea8ea69fd4dfd24c69bf193d1444b41f958", "44ff3ebb", "51e116e4032dce4d"}, 0x38) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e23, @rand_addr=0x5}}) close(r3) io_cancel(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x53b97c1aabf7bb6f, 0x7, r2, &(0x7f0000000280)="33542ee49405be1f7bc970daf04dec516e290db647a2aa29d67e560407dc059578b5f18569e718a294d034fa50d76aae4925a51acb68a907ea41aefdd5a98417974c37", 0x43, 0x8, 0x0, 0x0, r2}, &(0x7f0000000340)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @dev}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x40) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x4000, 0x0) 07:04:58 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3ff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x6f, @mcast2, 0x6846}]}, &(0x7f0000000200)=0x10) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) 07:04:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000003c0)={'bridge_slave_0\x00\x04'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$RTC_VL_CLR(r1, 0x7014) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x400) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x30100, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x0) 07:04:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:58 executing program 1: sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000600)={0xfffffffffffffffe, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="0000bb064970972773f4b5eda880d053366eaefbbc79c36e1275c48d88b20300b809f30dfc1f495f231ff1d57115d9c29040a0ffa744929f4e70073db6630686e7f55a359eabcd3602fbf32a8869616cf87d4629ac897691d2efae8ae3cef469ec09ef36313b0457207d960f0769ae800d427367f801b5520f68e6c735ad1179cb5f3caa86d7767c2137f3f80a259dce9e", @ANYRES16=0x0, @ANYBLOB="000000000000000000001200000080000500140002000800030000000000080003000000000014000200080004000000000008000400000000004c00020008000400000000000800040000000000080002000000000008000100000000000800020000000000080004000000000008000400000000000800020000000000080003000000000008000100756470002c00090008000200000000000800010000000000080002000000000008000100000000000800020000000000480001002c000400140001000200000000000000000000000000000014000200020000000000000000000000000000000800030000000000100001007564703a73797a30000000002c0009000800010000000000080001000000000008000200000000000800020000000000080002000000000034000700080002000300000008000100af0e00000c000300000000000000000008000200020000000c00030004000000000000005000050008000100696200003400020008000400000000000800030000000000080003000000000008000200000000000800010000000000080004000000000008000100756470000800010069620000"], 0x1b8}}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x200000000, 0x0, &(0x7f0000000200), 0x0, 0x0) [ 200.306308][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 200.312147][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:04:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x104, r2, 0x10, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd1f8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfea}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60000000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1080000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x1cc, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x100}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3f, @rand_addr="10edef8cdb1b3079b77e3d4f6b9418b7", 0xd8a}}}}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28a0000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57efd03f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc09}]}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_BEARER={0xbc, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @mcast1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @rand_addr=0x9}, 0x101}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492565, 0x0) [ 200.380151][ T8808] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 200.396551][ T8808] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 200.407509][ T8808] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 200.415867][ T8808] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 07:04:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:04:59 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0x1004000, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180)=0x0, &(0x7f00000001c0), 0x32, 0x0, &(0x7f0000000300)=""/252, 0xfc, &(0x7f0000000400)=""/135}, 0x40) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) r3 = dup(r1) r4 = dup3(r0, r3, 0x180000) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0xff, 0xff, 0xff, 0xf3, 0x0, 0x1, 0x84, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000040), 0x9}, 0xa000, 0x79, 0x8, 0x0, 0x40, 0x2, 0xff}, r2, 0xb, r4, 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x1b78889c, &(0x7f0000000500)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000400b8000699030007000500154001008178a800160025000100e558f000000002000000006f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb53b409d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000540)={0x0, 'lapb0\x00', 0x4}, 0x18) sendmsg$unix(r1, &(0x7f00000006c0)={&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000600)="494cb605e30b22638cbbb1233825702c75ab9054fcf09c44e3b78288aba26daf31e524589658bda59fcee530859ebb6933", 0x31}, {&(0x7f0000000640)="8ac68282aa32208aaf", 0x9}], 0x2, 0x0, 0x0, 0x800}, 0x4009890) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/sequencer2\x00', 0x20000, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000001b80)=0x4, 0x4) sendmsg$kcm(r5, &(0x7f0000001b00)={&(0x7f0000000700)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000780)="640be39e7bb1b0126ad4a7d855914df2b1d5d8faab4952b69679699430b887c943b528df95d7719ca17424093069b3a6071be99550f69611ec29d53666ffa4952184c180debd4673a75a7e5d2161f163e7402a46656a768374ba31e6ad826c3b2214a7dc3457ed07", 0x68}, {&(0x7f0000000800)="1a0ce894567ae1dbcdcbc5fd9f7d32", 0xf}], 0x2, &(0x7f0000000880)=[{0x1010, 0x84, 0x40, "82197297f274eb7da86a7f541e414d290db60468755d5c37a95c147a053a088d1c0598b2e87202315c26c1f503d971dece25541168825043f5a73308a54882ea0932c3c357a3f6dd3d3af31aed774ba826dbc966fd9c8bb206c3137e311dea0a581cff2bfdce85044041e4996dad86a81e7c293afb1f5646b4cfc30a31b17224d28215bce3d3fecfd04e8e8632ff533ff73e0085b3814eecb7e5e3019bfd80b50c1bc8907d910fc6703f55671f61504fad7c2c74cc39aec4551480f1e17e5d4c2657dd7eb4186dbf8514c5eb994e1d5a4fedc3ae5c403cfe5b586a0665a668667eb530a364c7287fe4003766f720aba478110441da3e5b1f70b4b4111965b83c06287c61e98c143dbbdbda1e361a7769d6dad8049a16b7772704ba4c2c48f0ca7415c9b53251cfa312645bdb0b0a9fd96d03183793a4efb4b597c6c766098ab925596df7fc153288f1490b7cb8d692cea00f16cfe5ba2fb28f6172188b1aedf6397bd7ba03427f42358e6fb5ece04ed02eb1b257e9a36e53e970c78354d7e112e52806f0bc7dca89673e7fc697863258ec7be0da781c30730472104578593919e0f6a5cae97397df2827a279895974837eb267f052c23e9aaaff84a2e49f2cede4bfc099ed6f0b5ebbe604c5816cc5d0eeae97fa211c7c78a3248f779cabb8f101284354fb4ff211d65603b4581c3de1d013e6e82b2d0bdda8c4960ed794c11fc981426ef5804577080605aaa82b52e2113c8f7b057eae98ff3cba9765aac1d2e734fc3af5fdfdf8a16e6a24c2afbdabfc5bc34c226d74e44aef98b3c9128fe0e9871000cbea1fd08f82638bc40687bd39b34ffe55d86df217d110ba3795c815e813a70843d137d81c0eb59159d944faad3de34d17607a299e4a0975eff46d6bd5c7639acaebd4cb79ab66ca5cc6b5af3839396f720dc1bf309a47240f1a703c8bb03e377e6ffa6dadf88dfebdc30260f5a95da26775269da33ba5d3967363cc9f7dde64bed7c67fdb8f99f2506b484b690df9bbb843b6c02e7ef03676f3919853036b7ace20ec4cc731aac277f0eab03001adf7d54a3ba9f6b9589eb2d9d14afd99a3637a3bf37b1dfd2bb66f28e36f9bf5f60ea7a4459b8b88f7e72905787939efbb4393733e33adc42853e5830410c0aae2597b32fb58500c74d0ca2a163c602cfe27134aed58e5825690d374b707f1edc9ea3e27098f8544947df17d428de5b515388b6a1629cef2ef47d4affe9eefc117411efb485fddd65ae1da49a4b91077f3159ee7048d8dfa2615808ecedb6fedfef73fb99f89633f72cdd4e77fda08a6313684a495b3083b16fffba2e9104ca17f24f1ae218acf20101818aaba3bdbcc6461e5e7b75b2c13f192b4e444927e52d4c7082d2ab0f0a312edc9317e2d746ffeb63982cc1dfead4588bda94b7e1333dee397fe94f1bfd777221cb009caa7d5cc976a6c2a63d09932e1f7265c4ffc6589f526b9d59e7ba29f10559c15c82e5c8ee37eb3020082904d7854efd66627d0e9dd6010ece1583d3bc4ff9e75053803ffdda86d43d1af54c1cdec080ce74f471529541f28951c7b902e2494938089335bbe6b849e12968bef3ca9435f54ca75311bb739031565898a55f19581e6d3ecfc0c3e1bf3e9cd47fa1d9197f4a014d3c3168312cc4e7d26adef280f6fb7627feecae15e8a2f0bc7cb36d35ba4b98e58a5860ef297ad8418f54e94c4b7d223f3a9c3f528863d9884b169f15ca56878be197cc15f1056a53688e1872150195ae1ed9fb3dcf9a45b566e6fb47ee0b767addf70c3fb42fdb845d154a32de5d62f526a5c52926c42e94cd535e61e10fe740578330c900acd9f766dc8555bf3fcccdbca48cded38b12d1494ef7b9de77ed5281846273473307f72c7c46ce687296a924bb8fd4d5cb31302ffb3b5e94fa507e6fad428e3173a8b07f373a6bd520a80f2ab9064479a46924832005608032f757f410362b01f2a9b8d73184221bd994386b8c58ef66db0da8ddd70d8f6a64291b545773f3a7444f64217c548a7d355cd12fad760716bb1d1d3b68064df1760a52b692df2ebee1073a045bdb416e98a6ea39030f1241b66a0735fcafd9363a7933a34c8be3d886414f3658bb39515b5df6cd4b864c5ed9d51cc4b087055fcbf0758d82c5853665de4ce2342563359e95d98e4631559ae4a38ce44cdf78d3e3177ae765c0a741c3b62fa64eee0a05aebcbd9665d1ac4ec36e0910921ad99ed714fa1a2d275f89e285440025e20facb5ceed4df52c9f35171dec4fb846db8649a5c4876e2b7913e1b8b8b251c63bfb4f67bd37d65405246e8d4bde9eb9a030d4f6f09e8d1493ae516e83258879c6bd0328c0463bfb665b1a1bbe906c8071888e4692d6319d57bd8c5ee1652dc0f4dfbdf469093ede5820c2498b70f03cd548f229ce33c4ef68906882d6101db15f860a09300ead5b191fe849c62dcee01136ab4ffa0be486af43a81ef2ac9515f7f7936948f4772e3b22755ab0e10f622a8362988a38257ca30146ac4febb7418df0d5f3ef523ba8be3827124b004f69efbede741021ff255ad0732632e1cd991ae5f612421726b8591b2b5bf1463564b8508d2aae55527bd2b1b926c69729043fdb347533c4156ae6f9df97ec3afb6dc01b1320acd44a34d0cf00ab7b0199eb2538e94ecc7a5c97423d3286861c10b3b74bd29fbf30789f64a20e65f41863e468dffda2a3952b6be81eb132a7d21d42584eaa65ba44b8af42996301483ad72ae8e41f377b4e56167322fecc8edc907c55ef203c54164bbd1fcbd972b8b2bb5c11f5e0f154773a19691d099d05f6258e41927d61fd5034c86d1bb99110f7b1e0fbeacad3bb8654d3ed7a5140ecd9ba14706c20bebd90786ad58f71d97c3d4589ef6fe033c837ae3c836e2e53e7b7f20532f3fb28ba82215a679f3f612696eb90c88855c8bd23210177114a8a6c3f81a6cf456f39c59e931a80df5c6a8259f17ec613be83f7e9dbaedabc86c5eb871e2e640bcbaa02b6999a914cc82c7a10605ea36eb0ecaee315afcfb5629d8fb7d102cf08506426224b03d915f3622cc4fa1ac956089026151214ee2810177686333d834ff4f7bcc0bc8ae5ca93f532ddb42cef0e0d87a3af6147d469a74f410081b2a13299e3cee979cf3a54ebb77ed0a2cc67a546dd642a6a50e18e492551576c5b8ce6ecd19fd19bcdb7ca7b8cb28e7fec3b54cb3da8295bab13773778218d8833698a316db9ed13bc8169d932a61a9aaee43e5089b7fc7ec09b97d8fd5a6c7a1ad2d189ae779d2716dcfbe10473f569418b4cfd3b3757dd4a6a4fd9059ee576fcd773d84fc491a9c0451f204d26f14589ae62aea82e4cccde3d062a1d5b91cc2bf228ac48bc1d668eb02158d6b1a2c89c2f39ffbb0c4e6f47d2c86f032cc98a400d71e2c11e9e08708042eb957f5d40fbf8b52aa28b5cea942ef461f4a86239b27b5680a6f58890f4c6974ee6ae9f8a6318b7c528bbc23ba374b56280202e3b8438022eaa6bfdd44206e5051240dafba6eb9a71666e1b70bc0c6ceb61c39f945a184a35061ddcc9cf02efe43d3db53bd53b8a898076cb4d83ec690d235edfd0d83ae5ba758250c8ae3486888fa2f8b8712788b1acbc0ff396ef8026581f3696e08e146aa49003a99e8c751a91b005c89c10c3d2ee25a1a69033d688f70a9983bae408aefa9b7c103a6623d0f9fd50c672d7a25783c62965974a96601d16e105c5e5cf116c48a6b7926daeefa65a912bab9be26c74706a59f9ecde85308ea3a80b902a62aa3d3da8c6d7022985aa085a52d8633a9ff44f9f8f81dacd47c50104103157eee0311e677b638b6ef44ea9e0ffc629da7890c1277ba15d5d3a6dcccdfe7ee451c7ef556ccce03ce1eca0908ceee2f8fedd8d71ada407797294da21ddbaaf3c0ea798a92f59c1ffdf0836cdaa5da010ea5b1b2ff1a7f712f76ab370f2bf15208246512346234e806e3ff1030ccfd6486d6e24f3a8ad07ebc5c98024bb69a3b17c709625cf2debcb37a528b2030e95c4f1dedefa648b1cd59a6be92c5155730d9572cfb17f6e5aaf534b758a85cf0faf364723f71733b19d9bf28785843ffd19000160e9e5f6f113d91637a18ffa043648d958c767433a36ac3a12c4bbfe8d2580d401978126e5dde2f935f7f523488d65aa021a781316b007c87b210521d6a0a30f219e1fe4aea217f4491a8aa272e0001d2cfdfca4719d98ba860ad5d32862729696075fd79d0a240edd3668fd387e9f6e165e9d3f855f401eb63ad09a60c5ba0d6b95e23df6e31ef1e22b1dd66fc9de89f4733d4e5e33e4777a607025a420c7dfe3bc24c84f35f9a60a4de40b76da593e188cc6bae8b1109e6e3c8744c204f2c96c0935af921d0e06a47bdb96f42527da9c06e1db9ad73cfb34bd1c2b58cacb0faba8c9777b0102d81124f19ce00c9e1c3e0d456bd757c2b22b5652c0a4ca14c897fc954bba3a1d4efb3ff6abc8beb5bc016470c577276be84cce920e1e6eead8ecf255f3c844c85c3fdb50ccb26003b685b827b4fd7ec4fd92b9a2d92bf777f1162244de36f7ba05194193ecc42e24692897255a8b0ecf3ed55ee07061944c48b3d4805a435143f35bb1b661c584e6e2f0eff14cb6123ab2b28531f9179b28dc9bbf257441aee4fa17108db8fdab65be4d0b257408b43ae3f2f63b4f2e5eba1fa86beea0d9bd2833215b60365f8ea968a11b27c6259c606762c83c52ffd8a248938559b6f7caadb12efb1b7a3dc0e2804b09ad3d2914a1e82882268ad302dcb073bb50b3cb79ef63b8ef1abc3c4325e63fad50b08a626bc64903d406cd6252ef3f843093ec4597c3b538163909022849bc3099ad378ff3ad73a6999a6d352f5be1d0926c90bedc94aa5fdd27d3003dc9d3518d62c952a0b1889120d3ca57e2c3780516826440ca4a782888a278623e9bf82d55f67bd2ea318a9d7190f5d42f95531e9e267e5414f6e05548e4a6ba7d95001b27ba80ff8b56c807b043874668f88a7206e71aa91b70aaa7b88a767d352ae713c23c345967501b2c32545990aa874c6cffc42620b873fe8d98be2f2e6be70d9500604e7277ae4df73e88a8c2153f6000f2b4c059ab4d9dcbc574c19f36b89720c4df1647d953ec0f957c4ff7ce5e162d4794103806940336589644b18cd123b109aee7bfe159d43914ceed0413199264759ff6840866042d1f5ae126a07b7c064f19450cd405f04c7cd84dfbdb9442e1e03bba3596a8194f4d9dcf950fcb52c3ac3d33ddaa1151b68b35f2ae1fe962acc8f863dc2ab1d67a3e10e0586410d0bd60fdea36f2f590dae92d6c9d2ad6888d7910209921e56181494a4fbb9030f9c3d4155dea4c61c57263674391935a97561eefff595bcb2228c462a39b0cfea0a226f455ef96ae2a4d70d471fe7e5b4d2bf20923ee6e80a1bf0906828e09d32e71b77ad2e55f9dc2defe0a426b771fbb9def53b18265c3600468f40d8fa5061f614da8c70b0c5dc2dfc4dd0fea6bc277bca5068e0b31f06479b88317a5a61b594b9150584b1c098a4e8586e50ec1253d1251e36c0ff312a5346f644d866cc424ca2a9b3c66fb7b3e40701f23836f33f0d5cd46e3e2be03011bc6ba99208c169df02f19405c1dcf2a4fca2090ac457386b37777a7134163006c72b77928845f96c36d536acf9263c5ba80fb734347a3a501415d3381fab82da703f23f94d6e707222ab0a02436959c0b2bb67f7f0772019c2074c42a7ee6c192aa3667815b66ac14b8d832a00ad46c52fc9eca866e74f3c7349b45102a1ed6b2fff946b09a6"}, {0x90, 0x29, 0x0, "c3ff31bb3a4c4b000773ae35870434ce92ddb1047f04a76882f8826486851e27ba7057b6a4b5a451542e649f8d96ff56b5d2ca6ce1223c23cf288591fc77110cf1a87230cb4a540e5deca4d72a055e3be4119d3bd082652c5dcc5177efae4d7b49946f3b541ae5a4c0654c5a4d38ecd369a12968806a2677e9243e5843"}, {0xa8, 0x0, 0x9b6, "490625f37986d159c153b5fbb9c3226b40c6363d77335a690e505621213bec3a9e42a965a0787eb049a8f51fe1b2919c8f76de4e636dc5fe4e998eb4b7f4a5a35bdc964427e3bd09d4cc8acd4877ace13751d2ca46d51d14e9a63ecf73ea73f3264b51ec24815bae9bfd06c86718722f3f1c352f70e03817a676d9faa7ad31d20c5d1f6101b6991b256730736581a97dd49c"}, {0x108, 0x14, 0x800, "a9e47f880a5e4865fec49c890527ed8432cb7ce760d0c25bd50903d955b643fd3e2acd0ae81f9852d5f102c60a16ca9913422bbb71e4572d7ca97db68e53e12c04605e13577690bd0c53c1a2cb3c309dc32dec0cdab13cb29afac4882d7ede535ec8a6d507a7f8b09db1db352ba8b8673ce6f2aab125a0b7978e6285056e0eea79fcad2ee63f700f428f58147bf99772b1e89181a88f6cb4528727a21c709e800ae3103f5f6afaf1a398790f2c11dbd35707783e13c4d000431c568d7119170c877fc46c1279bdf95e7203ee24c3083c1e8a0bcf03361fdb21ff15d589e552eb263872da3af8c962ddd1ea1ece4a9413a961"}], 0x1250}, 0x80) sched_yield() [ 200.465345][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 200.471212][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:04:59 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000100)='.-em0GPL\x00', 0x9) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x1, 0x22d}]) 07:04:59 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:04:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:04:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4008080, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) sendmmsg(r0, &(0x7f0000002280)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @remote}, 0x0, 0x1, 0x2, 0x3}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)="24eaf9abde406d59f8ebbcf89d31ba5a2e7853edcbd725da5e98229303b1088320921854dae983d1fb8d17fb78faeaa55fe904756ec398e4c6d669fd84e944eab7be157dae55ea11033d9c75fc39e03f2d4189518d52c10892f43bd3e8574362b722b0aa1d90d7f452aead28135c522f4cbf1d755fa88da68dbfe2c385c8418c5b988e4053ab20c6b6ab2bb192191991ab77fefc60cd30bca5aea56366896613b6d4fb83f1de8686feb7fc6e0433b5f26f12b01db47c3b0a07b3050f41683dd9967e32f154bc7e08f117486c4c34688f5d5b2948", 0xd4}, {&(0x7f0000000080)="772039062c20ff7f2a8ceb22386073f6c1bb887c56262ae6e570d4f08d08a48fb065c1d37d6009352c2dcb3067640732b4ed471c7f1da740fbb2689331d7c3f7de492a15ed1539d06996fe226f03cb934f4188faed67b37f1bb2c4475c9a1f03c1443ac2486b1d2e", 0x68}, {&(0x7f0000000280)="c3760462ad070ac1266ebdcf73b0d39fa0e988d101ca501776a599b49a4e525c9dfce0dc8bd758960c38adc07ec088a563eee8073d35c74d61a449162b930eb45d29f5a5f715654b84657c200e074bd574cf256399c2d4eac8e06e281adfe807ffb9d906fc7cad39b24462244f7fab389ccda20395e8eb234ea1327c96f7eb4e0277d9a4df8fb0165ff85c3b4f9127f50e66e5d5555db930c99bdd1a9b9ecefd86655bc9c9d9fcbfbfcad6ac3a3cf765a79b62678a14e23adae2b76000a38e22c12ad45b88f83a6b5ea069844e85ba5659efc3c9238ca50b3e331dcb5dbf502b5be8c7ec02ad04683d4d75738d50199dbe94c22b37e1a0", 0xf7}, {&(0x7f0000000100)="b280eb1ea5f8edfe8ab1ab23a77107581e8efe", 0x13}], 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="880000000000000006000000070000009c01a4979bcc4b7f2af52afab60c0f13c6530fc8c6a5a0fa3dd7ec8d8abdecce49084fc10ac6aa25fe11152de09bd46c169fc5605223248f759d30621dbcbce404412172598d0b9a0e8f71e90d9b9ba58706a25bfcba5d79f7e896984b62fe85ac00"/133], 0x85}}, {{&(0x7f0000000480)=@nfc_llcp={0x27, 0x0, 0x0, 0x4, 0x1, 0xa3, "8b856e88a12225543cbff110f2e89979e9ee89ccdea8df156c536fb63f3f75a70f6690ab3f7aa009a65ee504ec48adac42d215a3ed788b67865aba1b7a739c", 0x12}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)="193b3cd51e08b8ecf2691d12053e98655bf29685f5a31a6111e57aee686153ba2cd3fdc537869f0cec5190ded31adcfc56002efe224221d47425cbfa244ca7bda5c6e8144d346655f7716a6891c369d1f6639afc945cdb2d1d738527b4f7cca30c8240892e2e9995947e123c07d8c272dd65654adbf526dac5b47615f879b49dbaa5be6e3a69977167267d22bb5b19660fac054accc19baebf35f83d9579", 0x9e}, {&(0x7f00000005c0)="971432b907167cb0b9d3f85605d0a513819e845ac5abc870f6d1c55083cfd6954f1586d3ec2f0833a83ae6854aa3bc6b29adc08a9c0fd1d9ac1a80db5cac633fbeb8b6191a869f16a70a38d7dc593885da12532d82029f8b456d8955a5032529b8a1e0cf65690960e2a6d56b0a8731957ee3d7378692cdcf2c44ffc9663e3cf47db3c05a512b129b7c441b57edafd875822ced8901aa2cb2f88fc3fc9f789c4d825b16c50f44cfd8dd63186f98d9f7d742857cd6796b48f6b350", 0xba}, {&(0x7f0000000680)="ae8876ef5099874608fed58e7bdd4542f6", 0x11}], 0x3, &(0x7f0000000700)=[{0x18, 0x29, 0x1000, "7d5a0daab0e474d1"}, {0x90, 0x6, 0x3, "635fef2742401f81e1e2508e0c709eb8b9afa64322389ad4719e7ed2dcc935b595cdc2e01e4691d3687f02dc47180f966a74d3c2a96a3b48c8e05596df9eeb17f707a8a2926dfbbf791db5d5822bd1aa5ec70d671d0393f76872f87d7e60088f1a49821ad58065f4eea981eff975a405613a107465341e0ea87127c8"}, {0x70, 0x116, 0x6, "ebd8920105cc29a8ca784288677c5121741c99aed5241535b9aef233bd29686ab7bcbddbf6e425fe4b94dc62cbd99acbd3bfd0a0701a2b82f932b7c7f6f7b6f57367b7e372c1646536f3331318a3848f665eb113c556bbb3770a7a"}, {0x90, 0x10a, 0x0, "e43e99fd22a76d308c46969219f49ad108a0b504d35a3ba8d32695a594455bcce8d594092d434c743d5ba99517f24b4ae2517642941b53ac3b9ffd66b848f6c533caa86c4238d556f00fb8dc25517bbc0ab50a8aedfbd0beafb7cf4400fc3ef64e10933ca5bdb576e30c2adf62e5f73f70319c91e0576412d929b9b253"}, {0x28, 0xa94c5cf706f15ed2, 0xd4fd, "adc2a2d7f4c91bb88600bf6b3a10fd8e047a36774c"}, {0x98, 0x32e56751586f828f, 0x4, "cde88a16cd6436a2ef48f11860f24ec9b42eb080c199f96cabead744ef09cd63c814cdc07e36d16fefb5f95c9c6b5e053d29c5c02fa823eb59a8c55d20ffd34a5db8decbec96cc7216eb502a175c358af6138fbcfaf06b882ecdcf9768b44395286bd5d2ee7172a5d45ab98df0c24411835ecda819515256b6516ee26b657e71a8"}, {0x60, 0x119, 0x9, "b6c6f18bca43c965f400feb9846cec3481a7fc3b47c3d40b75c07ddcad8d954d763c5be6188601951332649898acb53280d7efd4d2c0c8e29a98109f05acdcb8232cabc14435854ce1cf54"}], 0x2c8}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a00)="c48d24f1ab328b562c5e0e91e90e9a82b2", 0x11}, {&(0x7f0000000a40)="b09ee9f0045f862c5ac368d57558c66f5a11161638251aef42f410f37002dc3b37a26ab5e877c3feaf5766f5ac575bc0c131ac118951b442efc5bf57a9e3f777e4b70e436584980b7f641b2d7baa14d02d0567111279e31a9de2bc2048f991d54f2ae2869664d854d9923c719e33f6e3601a28c575a8e39f455836394e24721f8b0c90d31d824ed470aef48560b092e5819d8950a1", 0x95}], 0x2, &(0x7f0000000b40)=[{0xb8, 0x84, 0x5b, "b8a2bff5896c4dda1d24a39f909984196b0a79c6f9b229d629c0e08bc5a812a473e3244add1adbe309554f80ea8fa24a1806bfd3407fdcc8266c35309fa89e77a4c653eb79ea3861b9439e0d8f17d6c32464709e3d384733787cd51ab7defd34c36e96e3e8da1d535fd811e051ba54f37bf15b56eb097b371a75550565a822a952dde2cf6525003ad2d3e7d37ba8d40647c9ce281089811fa8ff84bb704f28548a"}, {0xa0, 0x108, 0x7, "b919bcabd75e1e0a99cbea9e2b2b0aaf8f06a5527534fa1335972257ff84677a5ebdda41b0ebcd07c89ccbab9d64edfdaa11109bea5e6e158e891d9c25431c873a3359cd0f0aeef23e8a690b91f1bfb6cf0e475db9f8c53763c2110b2963291c7a1ac235c4378414d5e0d997653752af99b21f567f0ad692a894c849918b6c5609f69a7a0016e689f9a597a8cca54e67"}, {0x78, 0xa693d1bb93da2bd7, 0x9, "472ea4dedea3db2a4d0385371cb4c5a1ff53440ee2d6f50bd7c1dde8dc8b71baee2fb3c399eec354beb1a01b247935515aae45f197e1e6cd86581389080c1d8a5227ef4815cd4743bbb9f2e38fac1e492ce694181d59c78aa35a9259cccf469a45ad"}, {0x68, 0x88, 0x200, "ad996ab854405803acaf37e44a645c33c01484f1790aa11cbc8a9a4eea5629a715c80261a3b10128902928afcbb62002c058f4bfaebedcbe21243b12b10554497446083a936bf2419c3393a2fa71a3a597863b068fe3d576"}, {0x68, 0x105, 0x8, "23f5fe6ca5fd49cc2910d8ee681d4b35982d360fb4dae4cb27ed76d800ca0297b5fd8ce216876e988365bbfaa8991d097c3833e9706808d907a584a8232e13b71a4b06c2487c7ce2f0c27bc08902a0be23f6e4"}, {0x58, 0x100, 0x81, "e3af103e88410167c8a1d6eaf93e54195bb0fec6db268430e68d17e6ca87e8e6b0bf5d1fca120000e8810dde5d79e580027084a1a834dd8bae08ca319705167912c283e6a80feb31"}, {0x88, 0x110, 0x2, "7c99a6faacf627a1933b366ed76bda89daf6deb3c3c60f687d1e507c2ae2e89be9351e5ad52ed7f3f7d7dc3fa1226858797a1e0e0413ab70b4f56f303af4c80698f4ad279e19fb519e3bc55b42d1c290eb95968928ec8d6a461177f69c7fb7ba9e54bc46e7ad349930d975b913bbaf2295"}], 0x380}}, {{&(0x7f0000000ec0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(ccm-aes-ce)\x00'}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f40)="ef45b43d38bf3be497788675a44564b32b0ec833074230cd21009e3e0847ba2e5876e137c621857e41b46705985b9a2067d711d39096bdd2da1a4e74e338abd746d350061a3523bc027eaf2bd08f91e620bea917d1a5935e40cd50e98d0c79ea3014559d3bc3c3e8b9c26eb92a92221be4d3477e66779e40074c8cf1a6bd08bf05a9c6861cd56b64a9e309df6df5fc8f695a5263137b8cc8334f3a2b9b", 0x9d}], 0x1}}, {{&(0x7f0000001040)=@isdn={0x22, 0x0, 0x2, 0x23, 0x72}, 0x80, &(0x7f0000001400)=[{&(0x7f00000010c0)="22dae6cf3449aa691bb459c6444f17e6c7ded35f815bd84db0d44d51df9c0397f91c5655b40af536b345b286dc549c3b1f0c6481185d5056e4d711d6e364e7f978796bb06ed054b40641730056eb43d04869e3f78048a82a01d8172b1b81e647ebfb3967145817ddb88a3d54dd7e124ec6ed827b6cdfa36b1ece4b6ac53ff30079e556000547e34571a29d0208c44ce303ad6ffbd0dce830bc925485e36a257829aef09df7dc01", 0xa7}, {&(0x7f0000001180)="374772d492b03b8ca14b5f5b60843f40cba985e97ab494c2d908c92b1ce3d2adb7e88830d3357250a3b5ba040e5ed7d32c4bb9f4d9ac4915ea1959183e3affbdaec16721f523303aa8eaf0eabaae30e5df008ddfa986b0eec8c74d1d5c3bbe719282549ce4c9be9ceda8521bf2b9544d1e1d0fc01554f673eb45db1a01d3f9a7fbefe51bd2716f65f7e02fabe8a8fa79541b04fba4186501f4006a", 0x9b}, {&(0x7f0000001240)="2c12ae04cdbb41269a9ae2c429e9ef62b91aede4b44c5a730b3d32e99074f5d0c81ad368c956474289bcbeca52aaefa005a417a79beef509ea45a43c19c09bea52cc03e49a9fb5ac1334957995de90039436e6d84084c34280f2f32338089b2414540bdafb87b08a2b54bcb8d0fe1e310f2f9cd6867b1c4ddf93038282267de50380f532ae1d4515d4fb9aebdb5ac2dab5acc8055d6b697e0cb823f3bcd439321ad951db768a836a936a", 0xaa}, {&(0x7f0000001300)="2abdd2983f8affabf42e6f0d614efe872cad7e96e9a84db9b872cba195c10f45b494fa7cc5be1f73fb59ed89c446b32f6f", 0x31}, {&(0x7f0000001340)="fe3028fd7db612e35fce3ea8ef958d9c2df6361a8063266a9af9c1b21f6f", 0x1e}, {&(0x7f0000001380)="f9566710c712debcca70b471db628ea59c1951916263018169170dd4520b1713e03233cb322251df9db34469c1a6a4166cb304ccee415fdf1272d448e0a2e5b82bf4fb372914154fc6bc9a69167fc163a2e64981982d257fe4034aea92964408363cc483550cab64ea746be1339dfc2b7f265ce2cf9b8665", 0x78}], 0x6, &(0x7f0000001480)}}, {{&(0x7f00000014c0)=@llc={0x1a, 0x303, 0x8, 0x81, 0x87}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001540)="7c53afd0caa94e6c2c7bb3f4cfa405f6c46e5e35469c02ac188307cb70336ccb6ed087fcd43da569fcafacae5ae7b0edbe6292", 0x33}, {&(0x7f0000001580)="6c078e7b9d8b3b619767a834ae42a67a8dc19c2ac9f0bbb54f4730cb3e2c79008a5a0ec5314b49ea1cd7290027cd792756e72a95", 0x34}, {&(0x7f00000015c0)="6dcd9ff57f78873610967801a683188d10ad99d42128f0b5365a2000ee2abc32008da7583530f0f2492028953d2478cd453dbb4da00551ced63e5ea656c0421dbdf1db1c3ad32fefa0508f160a4f31091613429270686fa18aa833c708430eed3a4d4bb132edeb891ff66049de4d7be960b1fbb7cf94487da325585844300d7b0087e17cd4f41f6849a2b428df9e2830fe10e468b633865a274d31f38fa4917ec2c23469632bef548debcf5e", 0xac}], 0x3, &(0x7f00000016c0)=[{0xe8, 0x109, 0x20000000, "3cd7ca8f657bfb0ba60d78f08b84fc00322fd4d7cdb36eb494414a7c494103286679e6fd3c4c1370390bb1b8c53c83621f35d5f170e8a18327c0749f41bc6afc61ab5214bac3d5d44b99528580b1f5af110b165aeb64889dcc323fa8db380dc2b6c8cc220a295e92409beb0e23e3e446a2592b245eaba6895e2e6da95b0488647bcd6863d3dae944d620d231fda8f89f1873628dcc915316913a40b7b22f4be07a03a3e579a2e82e89b90003eeaab5311f51e24045645e916420b6bc41483fe79192e4ab065612248399156be484386bb704565ca3"}], 0xe8}}, {{&(0x7f00000017c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x3, 0x1, 0x3, {0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001840)="8adb544d6ef0ba77ba76b2a0a7054f16d114ae20cb72726459018994097d557c8464a4e30a7d443f02429328d35372eb025961c95b0314bd809a9c53b48415757210c5acb44f5ab5d8f15f329bc58a949817def0bebf8ed266d114190eb6fd024b84ec76d7c417b2f0e0fb211bf7cf6b698cf32a9f79ff4c6c1f608e4ea32b23066afd9596608ea6a80a80517195d61c8628c8486f", 0x95}, {&(0x7f0000001900)="e96dd3c56085698c6efc88e4140da0b86bb763ba4a0e7facd0b6db23236489ed9896e053ec7ec68f3b94147c577da7481dd44ccce27149ca2eda58d8f62257dd8fd6f225b6677081c32d73e84b490f45934667eb44501c85ad2bcf33917c8a8b4ea23c1d43bc9c4cdd99a8c9f889125bbe5e3acddbc9aa625885", 0x7a}, {&(0x7f0000001980)="991967b6cdfcfb598697b3a6890573badf2fe431c64b73026aa857fd60e43d65d47deff058c9f39747db11dd6a26d1202b7a3467ec836b0cfe7f4d9abc81d006129ce7fc5d4d17702203c501f659f9a0cff9e66bdc25f953bb070bbd4d5d8b2b69964b42ab2eab789f50422999b73535252c03bf0f3cb943e98ea654b7f06a5eeb230b0c2c94bfc9067f4fa6c6cd2a74c0b0d0492bcc50d40875c3a66b1d201096fddf7f022fe7cfe1913d6be06e534537d543f0f8118dbcdb4d9afd2550faee14536b9188da8796617d6bed8b7270416eabf5", 0xd3}, {&(0x7f0000001a80)="bc7ecdb921965fcc5268ffa53130054982", 0x11}, {&(0x7f0000001ac0)="74fefbdb2ce0ae0abe9e3e1f8a0a050b1c7ca4b1f0488e2c6cb2207581d50effc17e35098b320b57e383f9cc291c734d00d661577754718bfe498b8055e9968ecc6a3fd72f2eba425cf89e", 0x4b}], 0x5, &(0x7f0000001bc0)=[{0xc8, 0x108, 0x80000000, "cfa4a08aa7930a29ee09f0c0c089565eaffdf41dc038d4daaf17256c133452e8f4702e77a9378b706231670870a9988ed6d302ffea8a529b8a6312384ae2ac9d5b62f03e585f00b61963a5bab9a0fcfc6b5e2f84539a186685b68bea029217a25e44db06d10bc04892e2f5e42848edc07b234ade9f4dfac95f0a0dcc4483426350875f30e8ff5304fabbe75b7dbbfc7611da4b1c6d7e0494b5d4e15c9ae8946265c17242e75a271d1f43e06008b710e893c0"}, {0xa8, 0x188, 0x1, "47b19121086defd64941feec57f31ed82e9bd60effad8ae9e7b9761e83918cf4102e4a49a2c064b61e45b176c5a5051c3cf7397368abb94690fe34bbfc66cf3a2acb59a1b07723ff4a8ced9d806a350aec8f23efdd89da2740235baa577bb473de5de023d1059bf86519336773991f0135eb549f973c855f99f158c96b49dbfc67bdc15b833eb37e499921c66eefbea6fabc37ea"}], 0x170}}, {{&(0x7f0000001d40)=@ll={0x11, 0xc, 0x0, 0x1, 0x5, 0x6, @dev={[], 0x25}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)="0ea51d0e5e7a748a99ee279be92fe1769480944033f94842519f0aca49bf8e540bf46519d27e88c7280ad0a4529cbc25ca61e048a10c6b32bf2fb5967ab7aa01933b3f54765de83712187a8f75212228fc992d643666ad8b9b660c4de7576b916d018b101dc15b67d11b8582b9718ac5b90d464f6e597f7ae3cb339c514bae8b6ffa9cb2a26695e7248e33dcd6f1791a37d3665416b677e4ce1ebfc60172ebb7cf7c49ea3ea38fb26a026f728e6af6882299ae21e9e0bdab39f084c6cac8b44a40b4577842909a41f0", 0xc9}], 0x1}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001f00)="75c383ce527fe25737a902fc59960cac3f75af6c27cae031193ec2501583c8cfe8c627ab2a41adff4d573f9f8f8a5cf44c26e5ea6a9036d1f264f6cf42ce994d2b400c267e081303616df0268673817d01f793cc8b15a6e69eb3904923a9bf456e6e9920d2727b85338739", 0x6b}, {&(0x7f0000002500)="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", 0x11f}, {&(0x7f0000002080)="82db", 0x2}, {&(0x7f00000020c0)="7ad17f0a5f400764217f07caa37b7d58d951777310d4cfb6568bdd1189c4e329d848ae343218d6e89da2ca454f8797b1848f9ff14ae497dad24b881039b06c1c48daf3f1fdfab0e6ed0efcc43bb664f142ba6516a0e5dc4951b93fac5c", 0x5d}], 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], 0x100}}], 0x9, 0x4044c10) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001480)='/dev/sequencer\x00', 0x200, 0x0) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f00000024c0)) [ 200.847460][ T8787] bridge0: port 1(bridge_slave_0) entered disabled state 07:04:59 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = socket(0x1, 0x2, 0x0) connect(r4, &(0x7f0000000180)=@ethernet={0x1, @broadcast}, 0x80) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000380)=@gcm_256={{0x303}, "28065f89ede122d3", "c999ffac2636d9751ea91a62138bdea8ea69fd4dfd24c69bf193d1444b41f958", "44ff3ebb", "51e116e4032dce4d"}, 0x38) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e23, @rand_addr=0x5}}) close(r3) io_cancel(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x53b97c1aabf7bb6f, 0x7, r2, &(0x7f0000000280)="33542ee49405be1f7bc970daf04dec516e290db647a2aa29d67e560407dc059578b5f18569e718a294d034fa50d76aae4925a51acb68a907ea41aefdd5a98417974c37", 0x43, 0x8, 0x0, 0x0, r2}, &(0x7f0000000340)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @dev}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x40) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x4000, 0x0) 07:04:59 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 201.013728][ T8824] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:04:59 executing program 5: write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302eee"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) getpeername(r1, &(0x7f0000000380)=@hci={0x1f, 0x0}, &(0x7f00000004c0)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000500)={@local, 0x3d, r3}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[]) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents(r5, 0x0, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xe476) 07:04:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:04:59 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 07:04:59 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:04:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:05:00 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/btrfs-control\x00', 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) clock_gettime(0x0, &(0x7f0000002300)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000002280)=[{{&(0x7f00000007c0)=@alg, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000840)=""/172, 0xac}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/146, 0x92}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/37, 0x25}], 0x5, &(0x7f0000001ac0)=""/204, 0xcc}, 0x289}, {{&(0x7f0000001bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001c40)=""/117, 0x75}, {&(0x7f0000001cc0)=""/117, 0x75}, {&(0x7f0000001d40)=""/51, 0x33}, {&(0x7f0000001d80)=""/215, 0xd7}, {&(0x7f0000001e80)=""/231, 0xe7}, {&(0x7f0000001f80)=""/221, 0xdd}, {&(0x7f0000002080)=""/39, 0x27}, {&(0x7f00000020c0)=""/182, 0xb6}], 0x8, &(0x7f0000002200)=""/101, 0x65}, 0x38}], 0x2, 0x20, &(0x7f0000002340)={r4, r5+10000000}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/btrfs-control\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="696d8441ad061985fe0abf52d449a421cbdbf90c76fcc2d12082565ca93bf86a71e82870", @ANYRES32=0x0], &(0x7f000095dffc)=0x20b) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000000c0)={r9}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000002380)=@assoc_id=r9, &(0x7f00000023c0)=0x4) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000002400)={r10, 0x7, 0x2ed, 0x8}, 0x10) kexec_load(0x4, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2affeb6eb26afa3922180f5c9d9ac108583d69f6e3a31e797ac48c8273376ddaf3c4313ed9355a4fe0f5299d7b3d18702e76a65b313f5f", 0x37, 0xd8b8, 0x7fffffff}, {&(0x7f0000000240)="284aa4bdfadfe90b79807b454c52d6283ee66dfa13441cbd51fbc6", 0x1b, 0x3, 0x100000000}, {&(0x7f0000000280)=']&', 0x2, 0x3, 0x4}], 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x20b) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r11}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002440)=ANY=[@ANYRES32=r11, @ANYBLOB="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"], &(0x7f0000000200)=0xd0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = memfd_create(&(0x7f00000002c0)=']\x9dL\x00', 0x0) r13 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f00000006c0)="508da257877718aa5490a452a1ea578da1c63de1fd5ca4d046e9f4dbe333f531594600f308404fb0dcbb8493b99ebe007144544eb0744957c8c802ea7b60148a9ae08f44ec826c22bedd19a07f6d6c0a3e208c7f4fc897cca1940dac1e8613470d1593ea7119092888d49099a51e17daeaf564a1774f0f1f27d6b9284602d7e1ff7036217ab2201c29b43251db1ad17e7af17f3562be863feb0cdc91b387488243b880e53c8d59602f8f9ab929e80bf69bb04daade426aa7015e2f41ff0600125163b7893122edbe5eec1cb0044bb315ad3cbccebbfaee8df92bd22f1dee3b0b3e43f13ee3d543e22f38d44aaa673251ba", 0xf1, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r13) ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f0000002580)=ANY=[@ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000005000000030000000000000006000000000000000100000000000000ffff0000000000000000000000000000000000000000000000000000000000000700000002000000010000000100000007000000000000000800000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041de2b4b8d249df8b521688d85a2f9536cc6e6a1c706d0f25f5bbb54ebd588268e093e1abc04d917bdefbc043a473764a9c5248d60d717c77ce5e9bf742399"]) write$binfmt_elf64(r12, &(0x7f0000000140)=ANY=[], 0x0) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r14, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_SWBIT(r14, 0x4004556d, 0x8) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r1, 0x4c3f1000) execveat(r12, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r15, 0x40044591, &(0x7f00000000c0)=0x5) 07:05:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f00000001c0)={0x2c, 0xffffffff, 0x5, 0x4, 0x20}) r2 = dup2(r0, r0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@isdn={0x22, 0x0, 0x40, 0x23, 0x40}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x31e) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f0000000140)='syz1\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000040)=0x4) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000007000/0x3000)=nil], &(0x7f0000000040), &(0x7f0000000180), 0x1) 07:05:00 executing program 1: mkdir(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(0x0, 0xb) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setown(0xffffffffffffffff, 0x8, r1) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) syz_open_procfs(0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) io_submit(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) 07:05:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:05:00 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:00 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 07:05:00 executing program 5: write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302eee"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) getpeername(r1, &(0x7f0000000380)=@hci={0x1f, 0x0}, &(0x7f00000004c0)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000500)={@local, 0x3d, r3}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[]) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents(r5, 0x0, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xe476) 07:05:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 202.016017][ T8886] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.2 proc:/self/fd/10' not defined. 07:05:00 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:00 executing program 1: mkdir(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(0x0, 0xb) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setown(0xffffffffffffffff, 0x8, r1) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) syz_open_procfs(0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) io_submit(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) 07:05:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:05:00 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/btrfs-control\x00', 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) clock_gettime(0x0, &(0x7f0000002300)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000002280)=[{{&(0x7f00000007c0)=@alg, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000840)=""/172, 0xac}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/146, 0x92}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/37, 0x25}], 0x5, &(0x7f0000001ac0)=""/204, 0xcc}, 0x289}, {{&(0x7f0000001bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001c40)=""/117, 0x75}, {&(0x7f0000001cc0)=""/117, 0x75}, {&(0x7f0000001d40)=""/51, 0x33}, {&(0x7f0000001d80)=""/215, 0xd7}, {&(0x7f0000001e80)=""/231, 0xe7}, {&(0x7f0000001f80)=""/221, 0xdd}, {&(0x7f0000002080)=""/39, 0x27}, {&(0x7f00000020c0)=""/182, 0xb6}], 0x8, &(0x7f0000002200)=""/101, 0x65}, 0x38}], 0x2, 0x20, &(0x7f0000002340)={r4, r5+10000000}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/btrfs-control\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="696d8441ad061985fe0abf52d449a421cbdbf90c76fcc2d12082565ca93bf86a71e82870", @ANYRES32=0x0], &(0x7f000095dffc)=0x20b) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000000c0)={r9}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000002380)=@assoc_id=r9, &(0x7f00000023c0)=0x4) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000002400)={r10, 0x7, 0x2ed, 0x8}, 0x10) kexec_load(0x4, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2affeb6eb26afa3922180f5c9d9ac108583d69f6e3a31e797ac48c8273376ddaf3c4313ed9355a4fe0f5299d7b3d18702e76a65b313f5f", 0x37, 0xd8b8, 0x7fffffff}, {&(0x7f0000000240)="284aa4bdfadfe90b79807b454c52d6283ee66dfa13441cbd51fbc6", 0x1b, 0x3, 0x100000000}, {&(0x7f0000000280)=']&', 0x2, 0x3, 0x4}], 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x20b) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r11}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002440)=ANY=[@ANYRES32=r11, @ANYBLOB="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"], &(0x7f0000000200)=0xd0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = memfd_create(&(0x7f00000002c0)=']\x9dL\x00', 0x0) r13 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f00000006c0)="508da257877718aa5490a452a1ea578da1c63de1fd5ca4d046e9f4dbe333f531594600f308404fb0dcbb8493b99ebe007144544eb0744957c8c802ea7b60148a9ae08f44ec826c22bedd19a07f6d6c0a3e208c7f4fc897cca1940dac1e8613470d1593ea7119092888d49099a51e17daeaf564a1774f0f1f27d6b9284602d7e1ff7036217ab2201c29b43251db1ad17e7af17f3562be863feb0cdc91b387488243b880e53c8d59602f8f9ab929e80bf69bb04daade426aa7015e2f41ff0600125163b7893122edbe5eec1cb0044bb315ad3cbccebbfaee8df92bd22f1dee3b0b3e43f13ee3d543e22f38d44aaa673251ba", 0xf1, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r13) ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f0000002580)=ANY=[@ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000005000000030000000000000006000000000000000100000000000000ffff0000000000000000000000000000000000000000000000000000000000000700000002000000010000000100000007000000000000000800000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041de2b4b8d249df8b521688d85a2f9536cc6e6a1c706d0f25f5bbb54ebd588268e093e1abc04d917bdefbc043a473764a9c5248d60d717c77ce5e9bf742399"]) write$binfmt_elf64(r12, &(0x7f0000000140)=ANY=[], 0x0) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r14, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$UI_SET_SWBIT(r14, 0x4004556d, 0x8) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r1, 0x4c3f1000) execveat(r12, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r15, 0x40044591, &(0x7f00000000c0)=0x5) 07:05:01 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 07:05:01 executing program 1: write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302eee"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) getpeername(r1, &(0x7f0000000380)=@hci={0x1f, 0x0}, &(0x7f00000004c0)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000500)={@local, 0x3d, r3}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[]) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents(r5, 0x0, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xe476) 07:05:01 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r2) 07:05:01 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu\t>-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) 07:05:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0x21000000802}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030a79520000000000000c0000000800060000000002"], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000017c0)={&(0x7f00000016c0), 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x4c, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xea}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004051}, 0x10004) r5 = dup3(r1, r0, 0x0) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)="eae6ad7a6a6e33074a63d1301187fa3c470eb17b57e5ca93122b28d73ac3695875a9fd0fd60645af7f24041d36c056d3cf9748e1f72ca9cccf6637f759069ed4f96bbd1a0cfb25a9e90531abce3ba790b178892c6b89967c8490ca0db0274059f56aa63f3df930", 0x67}, {&(0x7f0000000100)="4185b7267f3c6d12c4250fc5d591f52b", 0x10}, {&(0x7f0000000140)="eb3971a4f4eb2da6cca73124df9359d729daf2b4aa22d117b7a2d1312dbac5332b10adc129f162ba6442bc48b357cef3ff9f2a81cfb547fea7575aed0a64c27f684329e01aaeabeaddd58b8283f46a570b8f63431831a940d7a498febc", 0x5d}, {&(0x7f00000001c0)="78d8980be02b5ae88d1ca5e562d90ce23c", 0x11}, {&(0x7f0000000200)="000c97291351c3660008b9bb6cdfb51e830d1e2f4dc95a1c39cc40eed144ca3c7afdd5889e77827231177665159f0760e6112682ff08e9c39e13143cf505f8441579d11b3c84705865020e87fdca7937fa95068d8365fe1cc7ab2d9e25ae4263f419e6acd46930e050d895d173e9ed", 0x6f}, {&(0x7f0000000280)="af61f81ceb5c0f0cdf9bea970c7ce4f3facdf967caea9d16df1b037de12bc412d06f3a52a7ee9843f9464372cce2d464adad84e2fb3eb60f3a5965998b81a099f978dc7162f7492b04fd9d47712e22c012ae3c44cb6f0f7573d0807a32d8962d1bc487a6075f19606c581cb1ac96645c5bb10363d39542d5c8b3fb2d5a3e3c25a7a602a8c51b5419568e09e3", 0x8c}, {&(0x7f0000000340)="511c101f3053de06b12c4ed70a3d5f4b77286ea2dec59c898177fa9a972b42432005d451b656e0bf331facb5b8e591424bf035e4", 0x34}, {&(0x7f0000000380)="48b93d046f53b9c364bf28e472bc0d240ad677be011992581c2c414e012644e47cffa5281c9a1f9a0eac4f1d9752356589c42168478d9828106e8455e0dcb393b181e91cccb030fcde7fe3952b8b2e1685e646a304420cb57af3ca0112a8e7eeeeba4c9f71d74d7973a509fc1806", 0x6e}, {&(0x7f0000000400)="909dffe5186c37a0ee71a9d22ecb007061dd7601f54b040bcc04830e59f5f3c157dc2b3df6", 0x25}, {&(0x7f0000000440)="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", 0x1000}], 0xa, &(0x7f0000001500)=ANY=[@ANYBLOB="1c000020000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000017f0000010000000014000000000000000000000001000000030000000000000014000000000000000000000002000000a2080000000000003400000000000000000000000700000086210000000573088ca67e4cce5c010509d265000c72b3dd813c6a1ff9b151020200000000000000"], 0x88}, 0x10000052) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vsock\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000001640)={0x1, 0xe28, 0xffff5ee2}) 07:05:01 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r2) 07:05:01 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendmsg(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffca8, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dffb1242749bbf616d381001f13fe270300080808001e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0xfffffffffffffd90}, 0x80) 07:05:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:01 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cg\x92:\xd6\n6I\xf6\x95oup\b\x00Z\xdf]\x90aO\xfbU0\xdf\x9b\x15a\xd7b\x19\xca6\xa3', 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) [ 202.991464][ T8966] Unknown ioctl 1078743882 07:05:01 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x54001) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000240)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='io.weight\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TCSETXF(r4, 0x5434, &(0x7f00000000c0)={0x0, 0x9bc4, [0xf15, 0x5, 0x7, 0x81, 0x7ff], 0x200}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/btrfs-control\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="01e5ffffc32fac6d5a94bdcdb638eb61ec8203", @ANYRES32=0x0], &(0x7f000095dffc)=0x20b) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000000c0)={r8}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000640)={r8, @in={{0x2, 0x4e24, @local}}, 0xade, 0x5, 0x8, 0x3, 0x84}, &(0x7f0000000180)=0x98) sendfile(r2, r3, 0x0, 0x4) 07:05:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f6800fe01b2a4a280930a060001fe80000214000000390009002d00", 0x22}], 0x1}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = fcntl$dupfd(r1, 0x5c58915baed85834, r3) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f00000001c0)=""/106) r5 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="220000001500070500e80000004c030502080303010000000800010041024fc10768", 0x22) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0xa00000, 0x7, 0x81, [], &(0x7f00000000c0)={0x9a090a, 0x3, [], @p_u8=&(0x7f0000000040)=0x81}}) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924924924923aa, 0x0) 07:05:01 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r2) [ 203.185533][ T8976] Unknown ioctl 1078743882 [ 203.264468][ T8980] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 07:05:01 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) poll(0x0, 0x0, 0x7ff) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x20, 0x0, 0x2, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0x9, r1, 0x1, 0x6}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = inotify_init1(0x0) r5 = gettid() fcntl$setown(r4, 0x8, r5) tgkill(0xffffffffffffffff, r5, 0x19) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 07:05:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:01 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x80) io_setup(0x1ff, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x0, &(0x7f0000000540)) r2 = open(&(0x7f0000000040)='./bus\x00', 0x105002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000240)=0xa84cac0, &(0x7f00000002c0)=0x4) readv(r3, &(0x7f0000000780)=[{&(0x7f0000000100)=""/53, 0x35}, {&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f00000005c0)=""/187, 0xbb}, {&(0x7f0000000680)=""/197, 0xc5}, {&(0x7f0000000140)=""/40, 0x28}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000340)=""/115, 0x73}], 0x7) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$SG_GET_ACCESS_COUNT(r5, 0x2289, &(0x7f0000000080)) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000400)=""/175, 0xaf, 0x1001, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) 07:05:02 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002800817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) keyctl$session_to_parent(0x12) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 07:05:02 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xdc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff0500000000000000ea09000000180000001400090000000000000000ff00"/47], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000000c0)) [ 203.514972][ T26] audit: type=1800 audit(1572764702.068:37): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16610 res=0 07:05:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:02 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 203.589349][ T9003] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 203.648492][ T9008] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.678185][ T26] audit: type=1800 audit(1572764702.238:38): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16610 res=0 [ 203.729616][ T9015] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. 07:05:02 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000230029080000000000131600fe65f3ec5300be280000f26278af2e39da7be5f80395ea149704faa1da261887ec8b4a46a0bab35c2511eaae64622e4045"], 0x20}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xce}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e23}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) 07:05:02 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x9b304737ebb3ade2, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x4000084) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001400)=""/4102, 0x1006}], 0x1, 0x0) 07:05:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 203.863877][ T9007] netlink: 'syz-executor.4': attribute type 9 has an invalid length. 07:05:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x4000, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x24, 0x1, 0x6}}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r3 = dup2(r0, r2) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x20, 0x20, 0x7, 0x3, 0x42, 0x2, 0x7, 0xb7, 0x1, 0xe7, 0x80}, 0xb) 07:05:02 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000680003080000a9030000027691f3ffffffffdac4e4c72496136e0eebf9ae20ba855acbbe72f36b67442d8749a29fddc6e0dcd8d2476d0479b7d438015fabbbb4bc94819c7fdd66ddcc1d68561939066d757a3ce1e2abb13edfc987bdd028d9a5605d263e7f000000873fcee41b73d76ea549e20122870879b3cc53ec20b742f797a2b9696bea94fba7ab8fdbffbf78572dc2a99ea0f7b55692d7da778fcd1342198e1c07f6f4c5b4ba7fe5eb614b3d50e823308e4f42551fee675a1a59235b6e219e0df47890d2ec2c63d61044307297ab18740836f835ebb485eedaffcfb8000000004e95c380e0e03c0ebb0000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) 07:05:02 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000200)={0x7}, 0x7) fsync(r1) 07:05:02 executing program 5: setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.evm\x00', &(0x7f00000002c0)=@md5={0x1, "97803841b2c10de05b4f2086cb89fa9e"}, 0xfceb, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[@timestamp], 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) sendto$inet6(r1, &(0x7f00000001c0)="be32199f008231708dc8d8b267e2a475eb792ef58e8f384289423bea", 0x1c, 0x4, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x1, 0xfffffffffffffffd, 0x43f) write$P9_RFLUSH(r3, 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, 0x0) fchownat(r3, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000000080)=0xff72, 0x4) setuid(r2) r4 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000900)={0x4}, 0x4) 07:05:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:02 executing program 4: socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20005, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, &(0x7f0000000080)) r0 = open(0x0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7400000024000b0500000000f4ff00edffffff00", @ANYRES32=r3, @ANYBLOB="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"], 0x74}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xf, &(0x7f0000000100)}], 0x492492492492642, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x3f84}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x431, r5, 0x2, 0xc0}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 204.331627][ T9045] 9pnet: Insufficient options for proto=fd [ 204.339389][ T9044] bridge0: port 2(bridge_slave_1) entered disabled state 07:05:02 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000200)={0x7}, 0x7) fsync(r1) 07:05:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:03 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, @default, @bpq0='bpq0\x00', 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) poll(&(0x7f0000000380)=[{r0, 0x8112}, {r2, 0xc002}, {r3, 0xc484}, {r4}, {r1, 0x5000}], 0x5, 0x5) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$rose(r5, 0x104, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) syz_read_part_table(0x0, 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xff, 0x400) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000100)=""/79) r7 = semget$private(0x0, 0x2, 0x10) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f00000003c0)={'raw\x00', 0xe0, "e4452e3b98dedf28a21b121fbe22c9d1383586ee59b5cc185c14975df54862c70591f6f552a0c7c3e74ff32d715069e16351e1b5cd49e8d75853b83afafce06736258e175080c6964d2ae36d9849d23a521c4b1b8aee8509b1b49c954c7574eee72d402e66161e694b2832e724118a4657275592a117eb6ff5fec48d560a9317e82ed56ac49583fc32f372799314346b605207b1b8c9f75e2ecafb6fecea19077f65f326da4bc131b2232ae05bdbf3b686d7c023f24e39be5b3101b0d2b1e62e37a738fb4071e08d415b2fa6245bbf9485c5f2bf0d01dcc116ef54b31d12f40f"}, &(0x7f0000000500)=0x104) semctl$GETVAL(r7, 0x2, 0xc, &(0x7f0000000200)=""/235) [ 204.516671][ T9059] 9pnet: Insufficient options for proto=fd 07:05:03 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000200)={0x7}, 0x7) fsync(r1) 07:05:03 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 204.652072][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:05:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) shutdown(r0, 0x400000000000001) 07:05:03 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 204.714662][ T9078] 9pnet: Insufficient options for proto=fd [ 204.975354][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:05:03 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, @default, @bpq0='bpq0\x00', 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) poll(&(0x7f0000000380)=[{r0, 0x8112}, {r2, 0xc002}, {r3, 0xc484}, {r4}, {r1, 0x5000}], 0x5, 0x5) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$rose(r5, 0x104, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) syz_read_part_table(0x0, 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xff, 0x400) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000100)=""/79) r7 = semget$private(0x0, 0x2, 0x10) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f00000003c0)={'raw\x00', 0xe0, "e4452e3b98dedf28a21b121fbe22c9d1383586ee59b5cc185c14975df54862c70591f6f552a0c7c3e74ff32d715069e16351e1b5cd49e8d75853b83afafce06736258e175080c6964d2ae36d9849d23a521c4b1b8aee8509b1b49c954c7574eee72d402e66161e694b2832e724118a4657275592a117eb6ff5fec48d560a9317e82ed56ac49583fc32f372799314346b605207b1b8c9f75e2ecafb6fecea19077f65f326da4bc131b2232ae05bdbf3b686d7c023f24e39be5b3101b0d2b1e62e37a738fb4071e08d415b2fa6245bbf9485c5f2bf0d01dcc116ef54b31d12f40f"}, &(0x7f0000000500)=0x104) semctl$GETVAL(r7, 0x2, 0xc, &(0x7f0000000200)=""/235) 07:05:03 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:03 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 07:05:03 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, @default, @bpq0='bpq0\x00', 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) poll(&(0x7f0000000380)=[{r0, 0x8112}, {r2, 0xc002}, {r3, 0xc484}, {r4}, {r1, 0x5000}], 0x5, 0x5) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$rose(r5, 0x104, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) syz_read_part_table(0x0, 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xff, 0x400) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000100)=""/79) r7 = semget$private(0x0, 0x2, 0x10) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f00000003c0)={'raw\x00', 0xe0, "e4452e3b98dedf28a21b121fbe22c9d1383586ee59b5cc185c14975df54862c70591f6f552a0c7c3e74ff32d715069e16351e1b5cd49e8d75853b83afafce06736258e175080c6964d2ae36d9849d23a521c4b1b8aee8509b1b49c954c7574eee72d402e66161e694b2832e724118a4657275592a117eb6ff5fec48d560a9317e82ed56ac49583fc32f372799314346b605207b1b8c9f75e2ecafb6fecea19077f65f326da4bc131b2232ae05bdbf3b686d7c023f24e39be5b3101b0d2b1e62e37a738fb4071e08d415b2fa6245bbf9485c5f2bf0d01dcc116ef54b31d12f40f"}, &(0x7f0000000500)=0x104) semctl$GETVAL(r7, 0x2, 0xc, &(0x7f0000000200)=""/235) 07:05:03 executing program 4: socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20005, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, &(0x7f0000000080)) r0 = open(0x0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7400000024000b0500000000f4ff00edffffff00", @ANYRES32=r3, @ANYBLOB="00000014f1ffffffffffffff0800010073667100480002005bb9c26146fcd2cc9b0000000010000000030000000033cc3598c9aa8178bdf1000000000000000000000000de7f4687000000000000000000000001009900007c24f1583940ea0e363002e94564838f54825863fe646c248656cb5d845549c5ceffcfeaab4260fca524afef20c00352bd32262c964c61f3771603fd386dc70a77e574632bd950e808d63007d6c6251ac28f6b621f863af06767ef3b8444b64c875270810633e2eb7d7a89d0f3cf2074bb2e180708593cd728026dfe7b7bc2cbc705ed95221583ea22eefa47c53252758e28ba4952ba2e86aff40a0cb6088e18f3326fa3a5dcd32cb951da688b87961591b4671e40cf3708000000000000000000321e6e4daef23cf875a45a0643142ac688f2a10d2a194d7079ce17e9cbda5da7ecf526f1406f379e40200000b3c3c00b016f9021957cb27486eea0345bdf43b770452e1353b948841660b1357707dacc631c885e515d18f9e1697a8604cd27f232de35373ad44e60efd73e28c85ce90800002d82680000000000000000cec5268374d0894824e83ff51cae120aae6ad04471171f99ab966cf04f91d117ebb94cdeb5697899e4005dae1be3c6299feb0c80ed6d93136f2d1fcc20fd1d0200000000ea195e2c9c2d253637f48f97061896b83a1aaafb7db5e4ba05edd7dfcfd44b0000170fda5ea11e015a17d10000002340a3888bbe076b2a5c9d0241a4e752aab3caf088ad0c9bf849225f8153039f563d154c85c5a3772f01efec840ae3e53085f2877adfe737c01f7c24fc50107c19e35e578b9b608e6a7265eaf5af9387a4a7fe7a190641217ff82eac668d005362f571dae348d770376a67cf141bc81cad1151de8d49745fc360e7a89510253668f3211e9c2e1e59840deae9fa409800499711205f910bce24aad30c604ec6c271f9b48184efdfda2e30bb953dd28b31e5720c8cf0b139ae14f814860f0fd204b8348bdb571f7f66ce3d5a4151f2266d0c695f59b93b948b226a1e1fab37b93197b2c736348e2078212d87b8f0469ea30f3ff63dccb61a517929d7508da6fb66e4cba5ac1e403f8c7de7a29814851423eccff5869eedb6bbe8a0efd47f76b32c30c86e72a5767071559bd357234033e8b949ec15ea42f862f94292d24ef01ad1a174e38c9a22a8cae141a49612875becc9fae30d8bfce0aaeb1c8f0e799c5aa343119cd87f8c6ffd413bada16d2751d2efe486de52812a066f75843bcdc036f85ac93489b92009f240fe5befa04d51375dc2000d253102c618a62831f819a575bacd3ed83066d2c0734273883252de1bfbed06cc705c1729d6ccd9a469a393"], 0x74}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xf, &(0x7f0000000100)}], 0x492492492492642, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x3f84}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x431, r5, 0x2, 0xc0}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 07:05:03 executing program 5: r0 = socket(0x40000000002, 0x3, 0x2) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x0, 0xffffffff, 0x7}, 0x3c) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f0000000a80), 0xfffffffffffffffd) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x2, 0x7f, 0x2f, 0x80, 0x0, 0x3, 0x200, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae88, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x5, 0x5d0, 0x3, 0x9, 0x0, 0x104}, 0x0, 0x200005, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100)) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x60c0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f0000000200)) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) utimensat(r2, 0x0, &(0x7f0000000240)={{0x77359400}}, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000340)={0x400, 0x9, 0x405, 0x0, 0xa4}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001180)=ANY=[@ANYBLOB="1c8efc237269747900000065ad0c6b0000000080ff7f000000000000000000000e00000004000000d00300004801000048f9ff00", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x3) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(0x0, 0x141042, 0x1) socket(0x2, 0x0, 0x9) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0xc08, 0xff3b) ftruncate(r4, 0x80003) sendfile(r1, r4, &(0x7f00000000c0), 0x8000fffffffe) 07:05:03 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:05:03 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 205.212577][ T9104] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 07:05:03 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:05:03 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty, 0x4}, 0x1c) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29}], 0x18}], 0x3, 0x0) 07:05:04 executing program 0: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$uinput_user_dev(r1, &(0x7f00000006c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) r2 = getpid() r3 = add_key(&(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$reject(0x13, r3, 0x0, 0x7ff, r4) sched_setattr(r2, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x8000, 0x800400) ioctl$EVIOCGSW(r6, 0x8040451b, &(0x7f0000000140)=""/154) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8, 0x2f}) 07:05:04 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:05:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty, 0x4}, 0x1c) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29}], 0x18}], 0x3, 0x0) 07:05:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x50) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000080)={0x4, &(0x7f00000000c0)=[{0x0, 0x8, 0x0, 0xc3}, {0x8, 0x2, 0xc0}, {0x800, 0x2, 0x0, 0x80}, {0x4, 0x6d, 0x9, 0x1}]}) 07:05:04 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, @default, @bpq0='bpq0\x00', 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) poll(&(0x7f0000000380)=[{r0, 0x8112}, {r2, 0xc002}, {r3, 0xc484}, {r4}, {r1, 0x5000}], 0x5, 0x5) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$rose(r5, 0x104, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) syz_read_part_table(0x0, 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xff, 0x400) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000100)=""/79) r7 = semget$private(0x0, 0x2, 0x10) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f00000003c0)={'raw\x00', 0xe0, "e4452e3b98dedf28a21b121fbe22c9d1383586ee59b5cc185c14975df54862c70591f6f552a0c7c3e74ff32d715069e16351e1b5cd49e8d75853b83afafce06736258e175080c6964d2ae36d9849d23a521c4b1b8aee8509b1b49c954c7574eee72d402e66161e694b2832e724118a4657275592a117eb6ff5fec48d560a9317e82ed56ac49583fc32f372799314346b605207b1b8c9f75e2ecafb6fecea19077f65f326da4bc131b2232ae05bdbf3b686d7c023f24e39be5b3101b0d2b1e62e37a738fb4071e08d415b2fa6245bbf9485c5f2bf0d01dcc116ef54b31d12f40f"}, &(0x7f0000000500)=0x104) semctl$GETVAL(r7, 0x2, 0xc, &(0x7f0000000200)=""/235) 07:05:04 executing program 0: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:04 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x80000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[], &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x10000, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000b80)={'#! ', './file0', [{0x20, 'SEG\x05\x00'}]}, 0x11) close(r1) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000000c0)) socket$rxrpc(0x21, 0x2, 0xa) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000080)) timer_create(0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400200, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x101, &(0x7f0000000140)=0x2) unshare(0x40000000) 07:05:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:04 executing program 0: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:04 executing program 5: syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x8001, 0x80000) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="71756f74612c696f636861727365743d6e6f6e657b4aed78b187b445eda699acfc18479bdfd659f3b5761b8ffd1ce10a09b15379c614d3eb1f11ba14d6be2f5e3037e9d27fd37f8e896234ca8ed6468a44f958a6c30a2caa5f97a6ff834fdf41b435e6b27b6de67d97d17854a1eb29a47f046e964ce80d66cf9039e0c92659576d0ec8d11a446f77839c508d01e3fcfa8e46ec170f04dde1c0d7"]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/\t\x00\x00\x00zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = geteuid() r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r12) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x5}, [{0x2, 0xb927cca86949dfa7, r4}, {0x2, 0x2, r5}, {0x2, 0x7, r7}, {0x2, 0x4, r8}, {0x2, 0x2, r10}, {0x2, 0x3, r12}, {0x2, 0x4, r13}, {0x2, 0x1, 0xffffffffffffffff}], {0x4, 0x4}, [{0x8, 0x2, r14}], {0x10, 0x4}, {0x20, 0x6}}, 0x6c, 0x2) r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r15, 0x40044591, &(0x7f00000000c0)=0x5) setsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000000700)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x5, 0x4e24, 0x0, 0x0, 0xc0, 0x80, 0x0, r3, 0xee01}, {0x6, 0x2, 0x80000001, 0x40, 0x5, 0x7, 0x7, 0x100000001}, {0x7fff, 0x619, 0x4780000000000, 0x101}, 0x5, 0x6e6bba, 0x0, 0x0, 0x3, 0x2}, {{@in=@remote, 0x4d4, 0xff}, 0x2, @in6=@loopback, 0x3501, 0x1, 0x3, 0xb0, 0x4, 0x9, 0x5}}, 0xe8) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000200)={0x9, 0x0, {0x3, 0xf6ef, 0x3, {0x1, 0x8}, {0x7fff, 0x45ca}, @ramp={0x80, 0x5a3, {0x81, 0x6, 0x74, 0x80ab}}}, {0x52, 0x6000, 0xfffa, {0x800, 0x5}, {0xe4, 0xffff}, @period={0x59, 0xe000, 0x8, 0x22, 0x3, {0x6, 0xee8, 0x1, 0x7}, 0x1, &(0x7f00000001c0)=[0x6dd]}}}) 07:05:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 206.131910][ T9175] JFS: charset not found [ 206.354099][ T9167] IPVS: ftp: loaded support on port[0] = 21 07:05:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$uinput_user_dev(r1, &(0x7f00000006c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) r2 = getpid() r3 = add_key(&(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$reject(0x13, r3, 0x0, 0x7ff, r4) sched_setattr(r2, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x8000, 0x800400) ioctl$EVIOCGSW(r6, 0x8040451b, &(0x7f0000000140)=""/154) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8, 0x2f}) 07:05:05 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000200)={0x7}, 0x7) fsync(r1) 07:05:05 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:05:05 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, @default, @bpq0='bpq0\x00', 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) poll(&(0x7f0000000380)=[{r0, 0x8112}, {r2, 0xc002}, {r3, 0xc484}, {r4}, {r1, 0x5000}], 0x5, 0x5) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$rose(r5, 0x104, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) syz_read_part_table(0x0, 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xff, 0x400) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000100)=""/79) r7 = semget$private(0x0, 0x2, 0x10) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f00000003c0)={'raw\x00', 0xe0, "e4452e3b98dedf28a21b121fbe22c9d1383586ee59b5cc185c14975df54862c70591f6f552a0c7c3e74ff32d715069e16351e1b5cd49e8d75853b83afafce06736258e175080c6964d2ae36d9849d23a521c4b1b8aee8509b1b49c954c7574eee72d402e66161e694b2832e724118a4657275592a117eb6ff5fec48d560a9317e82ed56ac49583fc32f372799314346b605207b1b8c9f75e2ecafb6fecea19077f65f326da4bc131b2232ae05bdbf3b686d7c023f24e39be5b3101b0d2b1e62e37a738fb4071e08d415b2fa6245bbf9485c5f2bf0d01dcc116ef54b31d12f40f"}, &(0x7f0000000500)=0x104) semctl$GETVAL(r7, 0x2, 0xc, &(0x7f0000000200)=""/235) 07:05:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setgroups(0x4000000000000006, &(0x7f0000000000)) socket$inet(0x2, 0x800, 0xfd) [ 206.574710][ T9167] IPVS: ftp: loaded support on port[0] = 21 [ 206.575632][ T9144] syz-executor.2 (9144) used greatest stack depth: 23240 bytes left 07:05:05 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x80000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[], &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x10000, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000b80)={'#! ', './file0', [{0x20, 'SEG\x05\x00'}]}, 0x11) close(r1) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000000c0)) socket$rxrpc(0x21, 0x2, 0xa) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000080)) timer_create(0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400200, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x101, &(0x7f0000000140)=0x2) unshare(0x40000000) [ 206.638823][ T9197] 9pnet: Insufficient options for proto=fd 07:05:05 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000200)={0x7}, 0x7) fsync(r1) 07:05:05 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:05:05 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x80000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[], &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x10000, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000b80)={'#! ', './file0', [{0x20, 'SEG\x05\x00'}]}, 0x11) close(r1) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000000c0)) socket$rxrpc(0x21, 0x2, 0xa) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000080)) timer_create(0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400200, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x101, &(0x7f0000000140)=0x2) unshare(0x40000000) 07:05:05 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:05:05 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000200)={0x7}, 0x7) fsync(r1) [ 207.005021][ T9211] IPVS: ftp: loaded support on port[0] = 21 07:05:05 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x80000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[], &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x10000, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000b80)={'#! ', './file0', [{0x20, 'SEG\x05\x00'}]}, 0x11) close(r1) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000000c0)) socket$rxrpc(0x21, 0x2, 0xa) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000080)) timer_create(0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400200, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x101, &(0x7f0000000140)=0x2) unshare(0x40000000) [ 207.126495][ T9231] 9pnet: Insufficient options for proto=fd [ 207.286753][ T9223] IPVS: ftp: loaded support on port[0] = 21 07:05:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$uinput_user_dev(r1, &(0x7f00000006c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) r2 = getpid() r3 = add_key(&(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$reject(0x13, r3, 0x0, 0x7ff, r4) sched_setattr(r2, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x8000, 0x800400) ioctl$EVIOCGSW(r6, 0x8040451b, &(0x7f0000000140)=""/154) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8, 0x2f}) 07:05:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:06 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 207.464578][ T9235] IPVS: ftp: loaded support on port[0] = 21 07:05:06 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:09 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x80000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[], &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x10000, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000b80)={'#! ', './file0', [{0x20, 'SEG\x05\x00'}]}, 0x11) close(r1) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000000c0)) socket$rxrpc(0x21, 0x2, 0xa) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000080)) timer_create(0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400200, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x101, &(0x7f0000000140)=0x2) unshare(0x40000000) 07:05:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:09 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:09 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x80000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[], &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x10000, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000b80)={'#! ', './file0', [{0x20, 'SEG\x05\x00'}]}, 0x11) close(r1) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000000c0)) socket$rxrpc(0x21, 0x2, 0xa) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000080)) timer_create(0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400200, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x101, &(0x7f0000000140)=0x2) unshare(0x40000000) 07:05:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) delete_module(&(0x7f0000000040)='lowerdir', 0x107d5f54d550b6e8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0), &(0x7f000095dffc)=0x4) r4 = request_key(&(0x7f00000004c0)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)='system.posix_acl_default\x00', 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000200)={'\x86yz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000980)='keyring\x00', 0x0, 0x0, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)={&(0x7f0000000140)='./file1\x00'}, 0x10) keyctl$negate(0xd, r4, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2}}}}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000400)={0x0, 0x800}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000480)={r5, 0x2, 0x7, 0x1}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r6, 0x8, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x6}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x9375ef770ef264e4}, 0x4000001) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') ioctl$VHOST_GET_VRING_ENDIAN(r7, 0x4008af14, &(0x7f0000000080)={0x1}) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) membarrier(0x4, 0x0) 07:05:09 executing program 5: 07:05:09 executing program 5: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) write$selinux_attr(r1, &(0x7f0000000080)='system_u:object_r:udev_exec_t:s0\x00', 0x21) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) shmdt(0x0) pipe(0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 07:05:09 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:10 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 211.489811][ T9264] IPVS: ftp: loaded support on port[0] = 21 [ 211.552079][ T9268] IPVS: ftp: loaded support on port[0] = 21 [ 211.644630][ T9277] FAT-fs (loop5): bogus number of reserved sectors 07:05:10 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 211.695185][ T9277] FAT-fs (loop5): Can't find a valid FAT filesystem 07:05:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 211.742924][ T9269] overlayfs: workdir and upperdir must reside under the same mount [ 211.855381][ T9280] FAT-fs (loop5): bogus number of reserved sectors [ 211.872986][ T9280] FAT-fs (loop5): Can't find a valid FAT filesystem 07:05:14 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x80000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[], &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x10000, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000b80)={'#! ', './file0', [{0x20, 'SEG\x05\x00'}]}, 0x11) close(r1) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000000c0)) socket$rxrpc(0x21, 0x2, 0xa) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000080)) timer_create(0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400200, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x101, &(0x7f0000000140)=0x2) unshare(0x40000000) 07:05:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) delete_module(&(0x7f0000000040)='lowerdir', 0x107d5f54d550b6e8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0), &(0x7f000095dffc)=0x4) r4 = request_key(&(0x7f00000004c0)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)='system.posix_acl_default\x00', 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000200)={'\x86yz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000980)='keyring\x00', 0x0, 0x0, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)={&(0x7f0000000140)='./file1\x00'}, 0x10) keyctl$negate(0xd, r4, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2}}}}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000400)={0x0, 0x800}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000480)={r5, 0x2, 0x7, 0x1}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r6, 0x8, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x6}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x9375ef770ef264e4}, 0x4000001) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') ioctl$VHOST_GET_VRING_ENDIAN(r7, 0x4008af14, &(0x7f0000000080)={0x1}) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) membarrier(0x4, 0x0) 07:05:14 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[], 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000000)=""/114, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000140)="0cf6baba811d8dc66fa887f96e32247fd55b8083635676fcae7e431967a9dc6c42dbd2442aaf5ccf348c92ad56c9ce7e80a5f6506bdc41dc", 0x38, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000100)=0x9, 0x4f5) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 07:05:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x7000000, 0x0}}], 0xc6, 0x24000000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000000)) 07:05:14 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[], 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:14 executing program 5: open$dir(&(0x7f0000000100)='./file0\x00', 0xb21080, 0x2) unshare(0x2000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x642201, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000340)=0xfffffffe) setxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U-', 0x96d9}, 0x28, 0x1) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140)={0x1ff}, 0x4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000380)=0x80000005) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000180)=0x1) 07:05:14 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[], 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 215.975723][ T9320] IPVS: ftp: loaded support on port[0] = 21 07:05:14 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[], 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:14 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:15 executing program 5: unshare(0x400) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) close(r0) fgetxattr(r0, 0x0, 0x0, 0x0) getgid() r1 = getuid() syz_mount_image$jfs(&(0x7f0000000000)='hfv\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x200812, &(0x7f0000000040)={[], [{@fsmagic={'fsmagic'}}, {@euid_gt={'euid>', r1}}]}) 07:05:15 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10200, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=@profile={'changeprofile ', 'vfat\x00'}, 0x13) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe005, 0x1, &(0x7f0000000140)=[{&(0x7f0000000980)="eb3c906d6b66732e666174000200010002000270fff8", 0x16}], 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x7ff, 0x0, "a729eb8a49f43352dc30b15c0b50f651a55c0924dbe95b969784b3bbbbaf4f33c6d94c3c05e2bf726d571adb5b7f9c201bb2629aff60fd3c0e56e7b8d96791d09ea5b5b0de3f14238485935b552243ad"}, 0xd8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x19) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r3) 07:05:15 executing program 1: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) getrlimit(0x5, &(0x7f00000001c0)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000200)=""/147, &(0x7f00000002c0)=0x93) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000340)=0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket(0x10, 0x5, 0x0) 07:05:15 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:15 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000080)) ioctl(r1, 0x1000008912, &(0x7f0000000040)="08a241055e0bcfe87b0071") r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) listen(r3, 0xff2c) r4 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000000)=0xffffffffffffffff, 0x11e) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x4a) 07:05:15 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 216.619921][ T9364] FAT-fs (loop2): bogus sectors per cluster 0 [ 216.627888][ T9364] FAT-fs (loop2): Can't find a valid FAT filesystem [ 216.680651][ T9372] FAT-fs (loop2): bogus sectors per cluster 0 [ 216.694836][ T9372] FAT-fs (loop2): Can't find a valid FAT filesystem 07:05:15 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555"], 0x45) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:15 executing program 2: unshare(0x24020400) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x100) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 216.770159][ T9362] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 07:05:15 executing program 5: unshare(0x4000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x800000, 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x9, 0x40) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) r6 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x800000000001, 0x708, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r8, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(r7, 0x2402, 0x6) sendto$inet(r8, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x9000000) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:05:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000240)=@framed={{}, [@call={0x179, 0x11, 0xa8}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x115) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e50d00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000e208000100686866000c000200080002"], 0x3}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x18, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x6, 0xb, 0x3, 0x1}, @ldst={0x3, 0x1, 0x0, 0xb, 0x4, 0xffffffffffffffff, 0x8}, @exit, @alu={0x4, 0x1, 0xa, 0x1e, 0x0, 0x8, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x0, 0x64af76ea49630d04, 0x0, 0x8, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x5, 0x7, 0x0, 0x80, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x8, 0x0, 0x5, 0xffffffffffffffe0, 0xfffffffffffffff4}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2, [], r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xf, 0xffff, 0x80000000}, 0x10}, 0x70) 07:05:15 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555"], 0x45) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 216.962179][ T9362] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 07:05:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x28000000) r0 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x6e93ebbbc80884f2, 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) 07:05:15 executing program 5: 07:05:15 executing program 4: 07:05:15 executing program 2: 07:05:16 executing program 4: 07:05:16 executing program 5: 07:05:16 executing program 2: 07:05:16 executing program 1: 07:05:16 executing program 4: 07:05:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:16 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555"], 0x45) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:16 executing program 5: 07:05:16 executing program 2: 07:05:16 executing program 1: 07:05:16 executing program 4: 07:05:16 executing program 5: 07:05:16 executing program 2: 07:05:16 executing program 4: 07:05:16 executing program 1: 07:05:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:16 executing program 5: 07:05:16 executing program 2: 07:05:16 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537"], 0x67) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:16 executing program 4: 07:05:16 executing program 1: 07:05:16 executing program 5: 07:05:16 executing program 2: 07:05:16 executing program 4: 07:05:16 executing program 1: 07:05:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:16 executing program 5: 07:05:16 executing program 2: 07:05:16 executing program 4: 07:05:16 executing program 1: 07:05:17 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537"], 0x67) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:17 executing program 5: 07:05:17 executing program 2: 07:05:17 executing program 4: 07:05:17 executing program 1: 07:05:17 executing program 5: 07:05:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:17 executing program 4: 07:05:17 executing program 2: 07:05:17 executing program 1: 07:05:17 executing program 5: 07:05:17 executing program 4: 07:05:17 executing program 5: 07:05:17 executing program 2: 07:05:17 executing program 1: 07:05:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:17 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537"], 0x67) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:17 executing program 4: 07:05:17 executing program 5: 07:05:17 executing program 2: 07:05:17 executing program 4: 07:05:17 executing program 1: 07:05:17 executing program 2: 07:05:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:17 executing program 5: 07:05:17 executing program 4: 07:05:17 executing program 1: 07:05:17 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6"], 0x78) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:17 executing program 4: 07:05:17 executing program 2: 07:05:17 executing program 5: 07:05:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:18 executing program 2: 07:05:18 executing program 1: 07:05:18 executing program 5: 07:05:18 executing program 1: 07:05:18 executing program 4: 07:05:18 executing program 2: 07:05:18 executing program 5: 07:05:18 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6"], 0x78) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:18 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x11, &(0x7f0000000380)=[{&(0x7f0000000200)=""/95, 0x5c8}, {&(0x7f00000000c0)=""/85, 0x2f}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0xa2}, {&(0x7f0000000340)=""/22, 0x9}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x400000000000334, 0x6, &(0x7f0000003700)={0x77359400}) 07:05:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x1, 0x0, [0x0]}) 07:05:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)=@caif=@dgm, 0x0, &(0x7f0000000800)=[{&(0x7f0000000180)=""/217}, {&(0x7f0000000280)=""/162}, {&(0x7f0000000340)=""/17}, {&(0x7f0000000380)=""/215}, {&(0x7f0000000480)=""/179}, {&(0x7f0000000540)=""/213}, {&(0x7f0000000640)=""/212}, {&(0x7f0000000740)=""/142}], 0x0, &(0x7f0000000880)=""/69}}, {{&(0x7f0000000900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/151}, {&(0x7f0000000a40)=""/44}], 0x0, &(0x7f0000000ac0)=""/207}}, {{&(0x7f0000000bc0)=@caif=@dgm, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c40)=""/56}, {&(0x7f0000000c80)=""/167}, {&(0x7f0000000d40)=""/149}], 0x0, &(0x7f0000000e40)=""/36}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000e80)=""/255}, {&(0x7f0000000f80)=""/158}, {&(0x7f0000001040)=""/99}, {&(0x7f00000010c0)=""/8}, {&(0x7f0000001100)=""/112}, {&(0x7f0000001180)=""/168}, {&(0x7f0000001240)=""/17}]}}, {{&(0x7f0000001300)=@in6={0xa, 0x0, 0x0, @local}, 0x0, &(0x7f0000001680)=[{&(0x7f0000001380)=""/161}, {&(0x7f0000001440)=""/77}, {&(0x7f00000014c0)=""/245}, {&(0x7f00000015c0)=""/93}, {&(0x7f0000001640)=""/55}], 0x0, &(0x7f0000001700)=""/73}}, {{&(0x7f0000001780)=@sco, 0x0, &(0x7f0000001900)=[{&(0x7f0000001800)=""/218}], 0x0, &(0x7f0000001940)=""/40}}], 0x460, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x40, 0x4) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x1bdd307, 0x0) 07:05:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:18 executing program 2: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_adjtime(0x0, &(0x7f0000000100)={0x357}) 07:05:18 executing program 2: [ 219.950861][ T9602] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 07:05:18 executing program 1: 07:05:18 executing program 4: 07:05:18 executing program 2: 07:05:18 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6"], 0x78) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:18 executing program 1: 07:05:18 executing program 2: 07:05:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:18 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537"], 0x67) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 220.545329][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 220.551227][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:05:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:19 executing program 2: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) getrlimit(0x5, &(0x7f00000001c0)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000200)=""/147, &(0x7f00000002c0)=0x93) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000340)=0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket(0x10, 0x5, 0x0) 07:05:19 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d000000"], 0x81) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='\x00\r\x00\x00:\r\x00', 0x100000004bb2, 0x420000) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000180)="e297ad9a02000a00900403000056b8c97f13", 0x24, 0x400}], 0x0, 0x0) 07:05:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r0, r0) set_mempolicy(0x8001, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000001c0)={0x6, 0x3, 0x0, [{0x1, 0x2e0e, 0x3ff, 0x4f, 0x51, 0x2, 0x80}, {0x1ff, 0xffffffff, 0x14f, 0x0, 0x1, 0x81, 0x5}, {0x621, 0x9, 0xc6b, 0x2, 0xd6, 0xff, 0x8}]}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) [ 220.797803][ T9647] MINIX-fs: bad superblock or unable to read bitmaps 07:05:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:19 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d000000"], 0x81) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:19 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000180)={{0x0, 0x0, @descriptor="6cd8d25f81d45238"}}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000000)={0x0, {0x20, 0x3}}) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[], 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) mount(&(0x7f0000000040)=@sr0='/dev/sr0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='hostfs\x00', 0x144880, &(0x7f0000000280)='\x00') r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dsp\x00', 0x200, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000540), &(0x7f0000000580)=0x14) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000002c0)={0x4, 0x1, 0x4, 0x40, {0x0, 0x2710}, {0x4, 0x0, 0x7, 0x1, 0x15, 0x9, "abdfea25"}, 0x4, 0x2, @userptr=0x7fff, 0x4}) semget(0x0, 0x0, 0x0) 07:05:19 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB]) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a9890000007ba79554354cdddb4e767263a7192f6f0100000028db38a5668b145e6313f3ee41e2f28204b8de607a25340b579ac761976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e5435e7a3bfaab8d914fb6ee79d501a7aa400000080000000d4bf66e8d85cc74a00"/143], 0x10}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) connect$rose(r2, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x4, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) [ 220.949705][ T9641] syz-executor.2 (9641) used greatest stack depth: 22264 bytes left 07:05:20 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x4000000000001b2, 0x0) flistxattr(r0, &(0x7f0000000000)=""/76, 0x4c) 07:05:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:20 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000180)={{0x0, 0x0, @descriptor="6cd8d25f81d45238"}}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000000)={0x0, {0x20, 0x3}}) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[], 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) mount(&(0x7f0000000040)=@sr0='/dev/sr0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='hostfs\x00', 0x144880, &(0x7f0000000280)='\x00') r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dsp\x00', 0x200, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000540), &(0x7f0000000580)=0x14) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000002c0)={0x4, 0x1, 0x4, 0x40, {0x0, 0x2710}, {0x4, 0x0, 0x7, 0x1, 0x15, 0x9, "abdfea25"}, 0x4, 0x2, @userptr=0x7fff, 0x4}) semget(0x0, 0x0, 0x0) 07:05:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:20 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d000000"], 0x81) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:20 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000180)={{0x0, 0x0, @descriptor="6cd8d25f81d45238"}}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000000)={0x0, {0x20, 0x3}}) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[], 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) mount(&(0x7f0000000040)=@sr0='/dev/sr0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='hostfs\x00', 0x144880, &(0x7f0000000280)='\x00') r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dsp\x00', 0x200, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000540), &(0x7f0000000580)=0x14) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000002c0)={0x4, 0x1, 0x4, 0x40, {0x0, 0x2710}, {0x4, 0x0, 0x7, 0x1, 0x15, 0x9, "abdfea25"}, 0x4, 0x2, @userptr=0x7fff, 0x4}) semget(0x0, 0x0, 0x0) 07:05:20 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00000000000000"], 0x85) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:20 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB]) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a9890000007ba79554354cdddb4e767263a7192f6f0100000028db38a5668b145e6313f3ee41e2f28204b8de607a25340b579ac761976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e5435e7a3bfaab8d914fb6ee79d501a7aa400000080000000d4bf66e8d85cc74a00"/143], 0x10}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) connect$rose(r2, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x4, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) 07:05:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:21 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x4000000000001b2, 0x0) flistxattr(r0, &(0x7f0000000000)=""/76, 0x4c) 07:05:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:21 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000180)={{0x0, 0x0, @descriptor="6cd8d25f81d45238"}}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000000)={0x0, {0x20, 0x3}}) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[], 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) mount(&(0x7f0000000040)=@sr0='/dev/sr0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='hostfs\x00', 0x144880, &(0x7f0000000280)='\x00') r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dsp\x00', 0x200, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000540), &(0x7f0000000580)=0x14) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000002c0)={0x4, 0x1, 0x4, 0x40, {0x0, 0x2710}, {0x4, 0x0, 0x7, 0x1, 0x15, 0x9, "abdfea25"}, 0x4, 0x2, @userptr=0x7fff, 0x4}) semget(0x0, 0x0, 0x0) 07:05:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:21 executing program 5: r0 = socket(0x2, 0x3, 0x82) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000080)={0x10, 0x4, 0x8, 0x2}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x75) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010000507000085030000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000020001200080001007369740014000200080010000000000008000200", @ANYRES32=r4], 0x40}}, 0x0) [ 222.795330][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 222.801191][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 222.807027][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 222.812783][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 222.818654][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 222.824425][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:05:21 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:21 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x410003, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = dup(r4) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000034000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x338) 07:05:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 222.938564][ T9816] netlink: 'syz-executor.5': attribute type 16 has an invalid length. 07:05:21 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) [ 223.034108][ T9824] netlink: 'syz-executor.5': attribute type 16 has an invalid length. 07:05:21 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) [ 223.185306][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 223.191123][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:05:21 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00000000000000"], 0x85) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:21 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$inet_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000240)=""/209, &(0x7f0000000000)=0xd1) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000200)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b479a7316270146d0e02f8e63ba8863cd7dcc6760253ef", 0x3a, 0x400}], 0x8000, 0x0) 07:05:22 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x2, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x9800, 0x0, 0x0, 0x16, 0x17}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc28}, 0xfffffffffffffdbb) 07:05:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:22 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r1, 0xc3, &(0x7f0000000440)=[&(0x7f0000000000)={0x4, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="10000040050000000000000000000000b22025285db74192e7576d9062ec6e2fa5733f8ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0x40000010}]) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x3) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000100)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr="8d665f6e14e453d4316f1b257065b60b", 0x4980, 0x2, 0x2, 0x7965d08c47151ead, 0x0, 0x2}, 0x20) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x4, 0x1, 0x7}, 0x2}}, 0x18) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) 07:05:22 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4, 0x0) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000180)={0x3d, "1d0ee7eda88fa9ed0fddee82e8ecbd6c62c18d039e0d56bacee459a67765a05bca74b695b730318a7d3d193479947a56a68f6e71b5e66bc66edac85d82246ad12e84525dd136caa68c80d3b74200a255edbee8b7a6e570da38b2cc1a61aa8787042b6921c755b1db8a9f7988271321a43af7c002a2e70129028bb2890e8b5558"}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x38, r2, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) 07:05:22 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000180)={0x2, {0x9, 0x7, 0x6, 0x2}, {0x100, 0x8, 0x4f40447f}}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)={0x7, 0x0, 0x4, 0x2, {0x0, 0x7530}, {0x4, 0xc, 0x0, 0x0, 0x3f, 0x5, "00021956"}, 0x5, 0x2, @planes=&(0x7f0000000000)={0xfffff08a, 0x3, @userptr, 0x80000001}, 0x4}) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000000)=""/50) socketpair(0x0, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') creat(0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f00000001c0)=""/171, &(0x7f0000000100)=0xab) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) 07:05:22 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00000000000000"], 0x85) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:22 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/d\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x7, 0x3, 0xfffffffd}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0214f9f4070009f4ff80000000000000000000000008000f0040000000", 0x1f4) 07:05:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:22 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) userfaultfd(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='io\x00') dup3(0xffffffffffffffff, r1, 0x0) r2 = inotify_init1(0x0) r3 = gettid() fcntl$setown(r2, 0x8, r3) r4 = syz_open_procfs(r3, &(0x7f0000000680)='net/fib_trie\x00') getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@mcast2, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000582ebac084c450e36f0b9a0092eac8f5d4c12253190a1e190199c2322d4e815935cf361f6d4f371e670f21b04eff550648305d3802999fecde9791d0bce13de058f6b0c8cf5727927e33eba6d235058bc17c6181b6abb08331117587b74a2e923b73eeb3289f4aab517f14065df93a009232ddb86e5b88fb7c46dd1efbf6f70e58f431d66c51519dc34ecd7a078b8926079bb9613059ffe03e2bd5154277369d7cb6ad74e3d450b26a8a01cacbcad3f4d23a6edf23edb09ff0d0eaef748a51ff299d24729d9eb4b575c8b46ad97f1037082d5b46eccc0c5993bebafc42", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x34, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$KVM_S390_INTERRUPT_CPU(r5, 0x4010ae94, &(0x7f0000000040)={0x4, 0x2, 0x1}) mount$9p_virtio(&(0x7f0000000280)='\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x100000c, &(0x7f0000000500)={'trans=virtio,', {[{@privport='privport'}], [{@subj_user={'subj_user', 0x3d, 'io\x00'}}, {@subj_user={'subj_user', 0x3d, '){'}}, {@dont_appraise='dont_appraise'}, {@dont_measure='dont_measure'}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 07:05:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8c2d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) recvfrom$rxrpc(r2, &(0x7f0000000140)=""/126, 0x7e, 0x100, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x7fffffff, @mcast2, 0x34ff6e43}}, 0x24) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 07:05:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:22 executing program 4: creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) r1 = dup3(r0, 0xffffffffffffffff, 0x0) getsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000040), &(0x7f0000000100)=0x4) unlinkat(r1, &(0x7f0000000000)='./bus\x00', 0x200) r2 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 07:05:22 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d000000000000000000"], 0x87) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) syz_mount_image$bfs(&(0x7f0000000380)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x44, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) dup(r2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x63bcdfb313bacdbb, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) writev(r1, &(0x7f0000000a80)=[{&(0x7f0000000140)="d31c2679f79153d86c696de3712ca73c56b1a7570197", 0x16}, {&(0x7f0000000180)="78563d3d7451b07cc03ff80be40ed7ed346c2b9f0d8d13bba0fba94d030b8af0552a7096910190e463f8d90c8f280a10de00ce66ae80826bda87fd4ddd0946d1e097ccc01693ac47ff5ec6cd500e2ccb8aeeeccc151cb00060cac2ec6858d33f25e8b596c402c38c68051634ff9724bc42e017046c6accc421cbdb7985eab7bab4fd114466a9909b37a4be9ffa44036168c18b549c252bc43c68acc94e2a3789d7aae9afe08767fda4e4cf09d950343b9d27ebb9dec0ffcf0f3da63f271eb92b4f", 0xc1}, {&(0x7f0000000280)="d8016c615fe2cb2327b9f38bb127d6887a82adece20fd5c07811d7bb3efd35", 0x1f}, {&(0x7f00000002c0)="9e888fed1d4a980eb997b8e98bf3e0c3c768799f090fe9d46ccd62353083fd75c71ca8a866e3e1c8de7ef02bcca3529a36a5b835a559bd2300fdc2a5cd8b42c4eb0ed13d0fa9fc358e1d76c77ef3a5e9b58e4862d6b891152c33171821ae737c9cdbb3fc1fb0a9554ce6e3307fd63480b76966e9aeba274645609b22d1ee8c488f3168b890ccdc9a29c989680a44b9e1eca7c9016834f3fa2ffdec6ff5b303d5d36424c12e5c0499891a22a6453189806722f4bbf5aa2fedb517", 0xba}, {&(0x7f0000000740)="1ec1bb8caf5179c6b69d78f821818296a834ee4dd839e7b509632b079b606a1a377b0e50d2f8b5febe479089d12c9905caa3bcdeb6a8be2e2580aa913a552fc6f5b928d43ccd277a87ed7f5e35c5d53b646153e81afc8b1d15e5202a907f287fd47e5f88115fcfd5069b068cc3472d644234b5f7aaf35716931bd0e89c3db07599cc8e363c7e8bffd518c6b1fd8518ad829da77b5f382bf2549c288f869cca", 0x9f}, {&(0x7f00000003c0)="bcbdd1b5c259670b698195a0fb8a4e55afd24e830afeb72a", 0x18}, {&(0x7f0000000800)="3d206ef328e5fc77a85ff592c9fe337accc7c1df7ba0032f2d120693d8668b7ff4fafe9c4549c64f9fa30df85dfd0a0efdbbd6a3348640aeeb210e0c664b6a6ab2ef665bc436c86680ba8945b95bb83f06dd45b43b72bcec7a14652f0e71b71e0a36195aabf87bb6dd4f1cb4a087e7497b776e87a147d3729dd32e83a8ff4a3ecf3edd6c743357155a675d296a830bf9fce084631be5ec11a479f0c9b2250936dfae851cecc9518cffcc94f6661a5cc7b86ae15e957e2f974e060ffd255531db56814d3c43", 0xc5}, {&(0x7f0000000900)="8dbe7a3e4c0e5b99c41338f01b7a7b194c544b77e6ef82f0fabbea363c3b2f0b4d56768a6356c0486f28be4f1adf243671bed2423b7737e4cbd07e87c31ccc7bf6eaeedf7f082706f00ac3c08d5e8ab5ad4eb8b3b6c9fc", 0x57}, {&(0x7f0000000980)}, {&(0x7f00000009c0)="67afd56d3cbb03c96684014672eda485fad70fb1755b9e0d893122261f6a4920d161f4aa0bd1b761b2324e9b31c59bdc7c9f2e502e75b08cfebb5461d8cbd1fdcaa425a50ae142c9373a4187157bd23c979f45b746840fafd085d4b9712a725c75acf733cb30331c32196ce4156f67ecdb554bd14f128d16209bfc729bff461ea7953d8a6b308e41ab478ab87657ba0b39a18b73b5d5f8226db6bc32d2a25d6de650274c", 0xa4}], 0xa) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000480)={0x80, {{0x2, 0x4e22, @loopback}}, 0x1, 0x4, [{{0x2, 0x4e20}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e21, @rand_addr=0x1ff}}, {{0x2, 0x4e21, @empty}}]}, 0x290) 07:05:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:22 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) [ 224.376355][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:05:23 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d000000000000000000"], 0x87) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:23 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) [ 224.437106][ T9920] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 224.669743][ T9915] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 07:05:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8c2d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) recvfrom$rxrpc(r2, &(0x7f0000000140)=""/126, 0x7e, 0x100, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x7fffffff, @mcast2, 0x34ff6e43}}, 0x24) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 07:05:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:23 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:23 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d000000000000000000"], 0x87) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) syz_mount_image$bfs(&(0x7f0000000380)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x44, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) dup(r2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x63bcdfb313bacdbb, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) writev(r1, &(0x7f0000000a80)=[{&(0x7f0000000140)="d31c2679f79153d86c696de3712ca73c56b1a7570197", 0x16}, {&(0x7f0000000180)="78563d3d7451b07cc03ff80be40ed7ed346c2b9f0d8d13bba0fba94d030b8af0552a7096910190e463f8d90c8f280a10de00ce66ae80826bda87fd4ddd0946d1e097ccc01693ac47ff5ec6cd500e2ccb8aeeeccc151cb00060cac2ec6858d33f25e8b596c402c38c68051634ff9724bc42e017046c6accc421cbdb7985eab7bab4fd114466a9909b37a4be9ffa44036168c18b549c252bc43c68acc94e2a3789d7aae9afe08767fda4e4cf09d950343b9d27ebb9dec0ffcf0f3da63f271eb92b4f", 0xc1}, {&(0x7f0000000280)="d8016c615fe2cb2327b9f38bb127d6887a82adece20fd5c07811d7bb3efd35", 0x1f}, {&(0x7f00000002c0)="9e888fed1d4a980eb997b8e98bf3e0c3c768799f090fe9d46ccd62353083fd75c71ca8a866e3e1c8de7ef02bcca3529a36a5b835a559bd2300fdc2a5cd8b42c4eb0ed13d0fa9fc358e1d76c77ef3a5e9b58e4862d6b891152c33171821ae737c9cdbb3fc1fb0a9554ce6e3307fd63480b76966e9aeba274645609b22d1ee8c488f3168b890ccdc9a29c989680a44b9e1eca7c9016834f3fa2ffdec6ff5b303d5d36424c12e5c0499891a22a6453189806722f4bbf5aa2fedb517", 0xba}, {&(0x7f0000000740)="1ec1bb8caf5179c6b69d78f821818296a834ee4dd839e7b509632b079b606a1a377b0e50d2f8b5febe479089d12c9905caa3bcdeb6a8be2e2580aa913a552fc6f5b928d43ccd277a87ed7f5e35c5d53b646153e81afc8b1d15e5202a907f287fd47e5f88115fcfd5069b068cc3472d644234b5f7aaf35716931bd0e89c3db07599cc8e363c7e8bffd518c6b1fd8518ad829da77b5f382bf2549c288f869cca", 0x9f}, {&(0x7f00000003c0)="bcbdd1b5c259670b698195a0fb8a4e55afd24e830afeb72a", 0x18}, {&(0x7f0000000800)="3d206ef328e5fc77a85ff592c9fe337accc7c1df7ba0032f2d120693d8668b7ff4fafe9c4549c64f9fa30df85dfd0a0efdbbd6a3348640aeeb210e0c664b6a6ab2ef665bc436c86680ba8945b95bb83f06dd45b43b72bcec7a14652f0e71b71e0a36195aabf87bb6dd4f1cb4a087e7497b776e87a147d3729dd32e83a8ff4a3ecf3edd6c743357155a675d296a830bf9fce084631be5ec11a479f0c9b2250936dfae851cecc9518cffcc94f6661a5cc7b86ae15e957e2f974e060ffd255531db56814d3c43", 0xc5}, {&(0x7f0000000900)="8dbe7a3e4c0e5b99c41338f01b7a7b194c544b77e6ef82f0fabbea363c3b2f0b4d56768a6356c0486f28be4f1adf243671bed2423b7737e4cbd07e87c31ccc7bf6eaeedf7f082706f00ac3c08d5e8ab5ad4eb8b3b6c9fc", 0x57}, {&(0x7f0000000980)}, {&(0x7f00000009c0)="67afd56d3cbb03c96684014672eda485fad70fb1755b9e0d893122261f6a4920d161f4aa0bd1b761b2324e9b31c59bdc7c9f2e502e75b08cfebb5461d8cbd1fdcaa425a50ae142c9373a4187157bd23c979f45b746840fafd085d4b9712a725c75acf733cb30331c32196ce4156f67ecdb554bd14f128d16209bfc729bff461ea7953d8a6b308e41ab478ab87657ba0b39a18b73b5d5f8226db6bc32d2a25d6de650274c", 0xa4}], 0xa) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000480)={0x80, {{0x2, 0x4e22, @loopback}}, 0x1, 0x4, [{{0x2, 0x4e20}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e21, @rand_addr=0x1ff}}, {{0x2, 0x4e21, @empty}}]}, 0x290) 07:05:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nen\x00', 0x400000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1Tto_bond\x00', 0x3802}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x5, 0x40}) 07:05:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) [ 225.110533][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:05:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f0000000340)='y\x00', 0x53, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="75707065726479ff3d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c00"]) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="4ac40d7b43aa0e5bbad69d9b405611e626541e7327827c51fac30fbb31cbdb7aa62969b9b2ed8576a4f9f69624d5e8695aa7e0ca4f1f6154d5c13cbcfeb4dfb246e4de17a2b3cb1f31610ac14403e7d1c864f8d5fa61e1c956e099a540be750247447ca6c89a1bba2a832ca773c2c135143cb5b2836c270b6eed6d383dc26dff0b750f5d3e056d4318344af5a5634cfe33e388817233779dce2915d8a6d3104943f78dda5039d1188c66f40e", 0xac}, {&(0x7f00000002c0)="cb58e27e165773549fcef067a9a7dd5b37c515ff90a44dbd36de7753ef3707ab81c04e2c8e864f10b256204e040f2790101030a3f67f8e1b4d6f71745a6440da6b7f30a7d16ab66c7cc9100cdd07b96dfbed771da1ba93e0746bd954377ef5f683c09f247eed04d504d3961d3b0f18", 0x6f}, {&(0x7f0000000140)="895793ae757774e157df8145", 0xc}, {&(0x7f0000001500)="007ae8cbefd7e83560f8b246a62df2112cf19c7c3da0fa2632dd55a9b224c8ff22d293361f3561140375433c6099c86dd529e13ad3cc36500b57a3712dd97bdc2ab5aebfc9b546200321bc05f718af980e2f4b1e5d4f49f822feb114e3e9642b4687ab0f21bf98446f701dfdc903e3c8b6d5ac43b025119e16a0baa867ff04c3566f301cb44a9ee64ac39246a5eaac3f66ad2ab43ba794bb8f74a22b894b84e4633673d42eedd3a9b677559c247285d05f83755a3b61c5b7ccca4fa9d9a6569b32712f102987470077de692bd1501a08c4d2a3586d2d01982dd2df0abc737515f0f381f607f36d8f375387603aa8fc3209b268688e7a2c982a41bdb0188dc495224dd3574ad78ea583eef4ba49b295b04bc5ce4e8092865fe0ceda862921fc6e2ef9972ef41b6708d692a1cf0d72d012c3304dd6e02d901beba1108393717fefc1f39c09bd4f1d31131b12d53c09532106946e60ac4e2cea19f9b7e1dadf81093feef99b3ebfa41fb95ebbb0c8c39cab10259e4dc3eddec9a67a316201b1d4ac2daeaba6a491ee677eaf45fb67dd024b07d216f9b7cf05c96a776b0608661fc17c1b5fad2163b202a9fdacdfeef74b90597393b1d99b30ebdd016dfaff7171b8b4e804e78eb2fe94e0e2a3f57ce9ef9a93bf4c7f49fa9fd3666becade5401c73ea42e9fbccc2cccf89947b86e718aa3b2af0842644c42a4c068b42bf68e529bd803541efb89e2d83b87845ccd8a99ed5c5c64352e56524fd17f84858fa241d14e1f3973805ec0e4f70edace13f961de9e54b9a52c1d590d2e22ac91fc404f691b2e8ae3adbb63163b209dd209c5f7a8b7819874b7f35c4ff88f29c58e49132539cee5f5e3895848ce3cb3f5e0ecdf1aefbdb6a373b39e5d6fc0f086dd490c2bf7da45cbd822402e23fe9b691fbc91fa9d50fe97e72dbe1fabf222173d4e2b92d01b592dfaefdef08ea277d631eb7fe2ef0c73abdfd6a5bd4015b1190c8532392170482b57072df9f5bfbff36fee33a278e602bb40c9f5114349b8a0bf580ac460ac3dc00c9e8e1ea97f8b192989180822115f725a2617d5c432bc005d26cfc0e719dc4b213176de1c35c276731edb68940f6907c507e56fa4d08221e722f45d046f4d66dd92c659cdc80231aa9142ce2e7844c056606853c214ff76854b4ab0edd6742a1452e64c8256a8b04c8c037ff431b513cb4074e5ca46fbaf6ad61f49dd94b70d1220ddb47ed7dace60b7a427e196a3ce0f0bef5645bbd52697f0a3c20a892095e53a241bb689dde16e0a5a386efca7a3ceb1340ed834f6d49037ab8e09d7118a7ce900cf515d2f75d7d2804bfc170163f2edbe80802a2085743a0c13e1cea62797ca1891533bc0bda5365fe33b7b65246a34f3c85198d5d00e8d28f67d63907cf46fa07d0c47a97f2e8f8ccb31820bc94cfcfb14c6103febaf8b853fc9e80c2188854632759f00aaefd1dfd5581054f9e4d44024be3305627d8a2a56b7245dd1e2f4e1236dcf1fd9e0862c9d890937320677900cc07c92e085bc5881624d18018c732d60ed09dd5df80fff0d6fe618e8666707b6a536829f4e9f27eb835850a09dbe28a06d5ea3c939f4b36b9631d9d5537470bf24036d6a70a298f2371b0a341cdff0e6551079f91009df4226b42e4cb33e37524e632bda21bd736566e9d0455f21d77f2f7616f09a97e0631fa24bc97dc928f95e8b22adcefaf7ca0ad20ce4ed5b367cbd441001725344ebc1986219db2617786243c2adf6b15247cd71373d56aa5317b6fd01e58ca077b6576bfb779ab28f5c6f2e5ed6bd4a125ce69aa006b92bed79c73de661d72f7e644c4d83ebf82e42965826b80d30120af145a04bbc0102de35e46e267550b12ca33cb9dfae9be806347d266fcf31fb4a8d39c6d933d08496397c4b95bc69adc47a92b1bf62279458f1a3990a3a84c7d0d6173c313a29dd4523ec77bcf5ae1a07cbfaec5025a8731dcd80ef709afc2e41b7dae3a8a77819ce3e87263517fbc360b77a8bdb50948523b2fb5496ff345acabd189aee42afa98ac9b8e7236856352d67a71bfdab95d41791b61b1571c6b9d1be07d6af5dfa5b7d97d1295983656312d950bea00bf0dca17c28926ab80226154f74e23e47440f41ddf2303520b850e9b134652505fe8aa93b5cadc1a22d383e818d78e66850ab71e0a98ea436a94d961e63e80e92f467ac7d93e7c36a9bd3335022e2651ba610cf95d228d46d338005466caac4a5e0f4cb3fdeba4e34f279a79a06dd26d40e4c65027c16958e4ebec68c1f35801630cb995c49bc373547eedd9e52aee347f77dd6ce90b443fa0c549d38f67c36161e6a020356f1ea3a7fd870bee048be432a99a68b8c90c9611118bbdab10225af2f08268eab1a16cad44444d304828d67d3c1f610ccd8b28f0f23582a93318344a9b75030003b7662077e20a0b007bc9b59be7474e069d44f768a2577ffe1bbf2c26b1aa1ab4e83ca25fe5559e46ae2bcebe1b3069c928b8ab1d1783c03933ef1858b6180412e1a66de2bb640ab14ba8437c5f9c8a1739e6c3a0dab5e23d93264317994d06bcc3c6331a107a0f060ccfbfe2ae469c1b3f935cde0cef4f8850c4041bd8921e994d6db1e95d7c2c7a3e82b50341c822cd09fdad57a300f05f244c1868d98d430dafd52d8610bad26bf4c49322e45508a301e0e64b65329dbe68aeb663a143ee558b1741c1755e2d942283728fc9fe6717d773aebac7bbd78bfe74a3b20ce13a1fc6ffb5c6ba5f5918a460623b53192da40d68068a8cee794b3f4b50c2cb399b9c7033746e0097f66d47bad21fedb4ca7bd21248c0f3a1b8d102d650e777c056450f4c07dc831f06b9899241c90a991d7d0568f8d96a5dfe5cfcb87421fa4be6b2391cfe57c8e80d6e1e5de9b10551a67648660ac0b936d6ca8c040584f57bfe3c6e565161bcbb324c3273ccfbf1165f9b54f91d6447a585f907ccdc89f970cfc2c7bfb6bd33033e736dc505f839b8b622ec58f3c08571c37ecb9d6a6097f792ffe72cd0313fbcd77fc6aa56cf86e3252d511a6906e8f7f85255230b0ee9be9485daab9e19816760c310220fc35dfe657c9b5f504115dc29dade8093bf43c7e90bfb269a49346728aaf83f596a0334a3a478abeba22e7c52b21a076d1cd118b5f11861e7f4637218677fbfc32e2fb444dfdc11f9be4190ffbacfa9a0723f2223e81e7a10cfcce1a644b6347feb4f308962db215e929a2f3028147b82c332f44bbeeab3ad3d269aa5263379f49382061871db2a0e34da721c25a368f95fb405545edd68deeccac436519341a0edcc44819c8166bef4b83bb94d0c5f997ea60bcb48d8f75802bae6ec3425d68bf8ba623af87b72ddcd41f43d7162861ebb113dca97c85a3aae258f220e270e1acafd220ecce5abccabe621f96ba50ac1f01c8da0e9f484347a81f7fe05221405b95485dad418368aaa08d1efb088153ee8567b98b2ea4c48adbe4156675c9484d4876595f308a87e3d4924c74df710a832f74641537aa532fc5d01e74676ae295172dabcb6d1fead4c2600318016362264711d09d0f61dd26e1c6e24213d41386a71a63afa5bcd35d78aa36da4b859e78bcd8a4f506291e719f2f348d48877b7d6dd5f995826f13d3a2b9fe6e572833bbfcd1da389a54f980fcbd1df63df7688e6137f8127702528d28d83963827e42918ad238a91e988434214bef542e04e28a418c389d0b0d1d0c35fb843e8ec9af78544a015741479caa6b64f635bcf4c37230cb7b313fed21af4e5fb59ae132d930f45fb5e7d22370c8867196e2bde7206b2077c29f5e311e97c1f06f105d1ff9eff2a2448a193cff4bdae46445d758d0d77a10c9e850bdd0dcd1e81c02105c7f41bcb1a657c1fd9dabdfa21a38ef74ee02f161d74936ee4ac1af355543d6982bc1210075f966270172eb387c441a325fa8063d79aa530475ee84b454903a2d0017b325bb23521f616693fb24e65e411c3eabf702ec7fb4e34169544a562dcf69389ee9250b1ba0de6a0ac440766a435b16a7412fc809b9f0ed99fcb8baf0c80e9c7093667a0a280f4f5b333c74c6da7cf7848378665b2471bdd7244e709be62125b98638273845e0ef65d05df7662e12d798c5c12f09e23ada418d27406c4c8abeb286115917bdcbfe5b91b4decf0b31a6054c798dfe3e12bc4c420677b8b78f0acbdd2c501ed3c14a3620c3b17dc5cf75962651cc314719c36b1ebb8a6e393481fb46ba466df468c325d418fe7302091f13ed9e64a28ec85c0dff38c4999b83efdbcb6066817a25e2e12f15b76526f3c1098ebdb78ccec1b2000a3384c57e20e50fcfc8a84f278f51c29a1ada69726a589e1c74ebade9f345f8e07ff45768d44bb3101c4a96d2d4a91177d8b1c1005480663aa4922af685a0da1dec51d9dc79a23887ee2f39d6e0d2b48c3ecc8f145eb5a6e4331c36dd7587e9821d880a655329c029787e8f79a610dd0ba1970807638f0bb31bca864c2983a9644eb51fa9da1fb9730e6b84037327975f836547c4cafbe6ba98886b6a4ae4d694f5474d119cbc883de59816727234083b96347c9b41c086f47a376d3bdff735ca5f428b1d3e13bfa77d9313cde175385144787f31ab755d6687ea239fa3a712eb6f0a214c430d7ed9c5709823474ecda4d1f6bbc9f6b467ae6acea79011f7e3403f72c75f16e6635e18c6f47c1aac9674400adda6559af5d9a819562ff46149eeac3b36d8c4271a346446e94b85d2e803196f69357bc5ad8a694328d1a483de66bbbf59fcd18580dc340ac93c7970d94651f68439747fdfb2324123bfc56597192c68f99f2c11db5207953b983409731e787bd926940f20d315f83362bb0f752761df56614ff27820ce377b64a63447e9daa8f87ac08160d94b082574e11d24401a743d46514b8f5d2492b06ab996281309bc21ca09114ff09440cc8830496856bc322a9db0fb56cf1ba27d4e1b45d793b1c5609df4d6e980d677854ea832f26f91b0b509e06dfb6ecfafa7ef9e0f38d7ba3e0562f24849f857c3beaaef9380d41c8aae3ac4b29183fe799268da5818a701ad3886d4bd0cc52a5a1e0e4f75bb51febe34123840e1b010161dbee32a4552dd1f4d3ff7d804b89916c5a19793c220d7b2fafd1557911df0eacd5eb485a2e41e10e64dbdeb043e93b0d99aee797b1ccb2774b52e743fa85a8168b301980fa1e385eb63f7ba3e404db57f2ede3ce9f312cfd4ad62571f4d1daccb180bcc774dd932efaae1b63d2cc2f92df1157042243bb475721cf9195f0874df0657a5a9531c99889c0c082fc2696b7025e2a328359b142174e3d94ac87f23ca62a90d5509edb4398e2cbcae7299a1fe96c1c4ba1648d16f4abdae49e7fc5a8b08663f9285c4e9858ff5c71893f72b09e2d464942e1f074fa22f7a762f806e4620eee7cf27188925e00b5bb70bcb5ba57260101277f99cca66aa94548a583e280f7387c70fca7defef9785a779aa43a5b1660605b45d0e6b803d76b1da29314a0cf06538a417837ce1a18cf5fbec988aef4697d5e256e57ffd3411392d05883ce43784fdbb27a8ddca50145de7b1a0a16d244b76abed2a6eaf8b01fea28726f10501c64003527bf550631fd17890467e6f9bea33330d332fb130729261279c259761eec6a42acffde9e1fcab5b902c34a47beebec5cc0638b4add75a3767a4f3a43f65b190a1744ac57414bc50b0a29675721e24b6e944258970a4ed6caa0516a4db19ae94cf414c3fdc1e7784e011cf7c158a7facfa023fe6cb85144d36a795c378fc77adea4", 0x1000}, {&(0x7f0000002500)="36f6b1a704cf6766a473e8b593326d6eb622ad2ae3899c0b847b3d44d6a2abf3d94252b01ed7cc04275e768c08f77c05d82f47719423343b09eddcfe262715dc8876f199dd7dc29908139452ec5ce41a43300e4757f0165376f4ed79f8f6c54ba30d6637713968c69f2d6fc796bcb060b31c46dfdcf6f848769ae53cb2a6a56779fba87c94cc888a8c3e727b", 0x8c}, {&(0x7f00000025c0)="aa8043dd2636d9532e54ece5153e370ddac34a1262201270410dd0b81dbaf751c6e219505dcf8ef363c8b90924ba76a207eec1797ece6d3d1e11968c4508611ad1c9361d9fd7bcaa241e96c0df9c8ff074fadc1b055d7f62c151d4dea4934b36928f56d8009cf282711beed8c46829e3beefb478da8a6cd7866a12212b21bb5b5320e27ea3e3abfaf73cf512c3f92b1539", 0x91}], 0x7, &(0x7f0000002680)=[{0x60, 0x111, 0x0, "85d777c11858ce5e2ffe4fbbc52460f6d976616fb92232507a844ccfcc7320490c84ea6ff77d408cb116fa841ce54b5c99d6b3ecc402ae1718559e7386459f616e90ebb3e919f230a0430f2a16a5"}, {0x20, 0x111, 0x3, "58a9d1dfb6236baa7cd3979e"}], 0x80}, 0x8041460) 07:05:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:23 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/136], 0x88) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 225.333236][ T9971] overlayfs: unrecognized mount option "upperdyÿ=./file1" or missing value [ 225.423777][ T9956] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 225.428033][ T9971] overlayfs: unrecognized mount option "upperdyÿ=./file1" or missing value 07:05:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x3, 0x400000) r4 = inotify_init1(0x0) r5 = gettid() fcntl$setown(r4, 0x8, r5) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f00000000c0)=0x5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r5, r6, 0x0, 0x3, &(0x7f0000000140)=']]\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r3, 0x0, 0x1, &(0x7f0000000100)='\x00', r7}, 0x30) r8 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006311320000000000950000000000003b3ddba7e2acf7bb1240447b00"], &(0x7f00000003c0)='6PL\x00\x11\xbf\x1e\xa2\xec\xfb\x1e\xc96\x96F\x97\x04\x7fguD=wI;\xf4\x95\x0e\xdal\x98\x8e\xee\xdat\x02`\"\xe8\x84<\x810 \xd4\xf2\x92\x81L\xd4\xb9\xfbgB_\x13\xfd\xfd\x89\x10\xec@\xf5\xd7\x0e\x1b\xceG\xfd\xb3D\x80l\\\xe4Dl\xc3\r\xadC\x1d\xf8[\x16{\"\x8c\xf9DcQ\x9e\x13\x89\xffJ\x1e\x9e\xa3\xbd<\x0e9\xf6\xbb\xad\"E\xe7F\xe5\xd5%\x92\x8aa\v\xfb\x18\x1fY\xe3&\x95\xa6\xc3\x81_R}<\xa5\t\xe7L\xe3\x7f\xad:\xe7NO\x8d\xef\xc8\x1a\xb6a\xc3\xb39_{\xe0\x92\x93\x11F@-s\"w\x810\b\xa6\x1fF\xe4\xec%\xedR\x04\x01\x9a\xe1T(\x0f\xd0\xaf\xa3\x94\xd4\xf1v\xfa\xc0\x11l\xb5\x8eB\x82\f\x04\x9d}\x062\xad\xdd\xedt\xd1\x02\xc6rM\\\x8d\xc8!\x81\x9e\xe5\xd3\xfa\xb3\xf7\xe5\xafa\xd7\xa0.u\xc2{\x8d\x17\xf7\x10\x00\xa7\xbd\x84\xd5E\x1ei\x92[k=j\x9f\xcc\xa73\x9f\xca\xa8\xbcc\x8e\xb9\xb5\xdf\xdd\xbf\x8b\xd9\xeb\xc2\xbd\xf8R\x0f\x00\x00\x00\x00', 0x100000000004, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 07:05:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0xffb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000000000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xa, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001180c0000008100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000040000008001a000400020008001b000000000047e4ee84ad37a874b86d77665776ca98c887e8093b4c34c565b55ec57de34d27a8d726570713256f2d3ce8a657b9a5e18e58060e770f32bc4583a7ca136b470e0cb29ae8c4a45972d223e0f985d349974638cede051897d73004a8f30997c5018e4619b487af7f79d8b9497954"], 0x30}}, 0x0) 07:05:24 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/136], 0x88) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:24 executing program 5: r0 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") dup2(r1, r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) r3 = accept$inet(r2, 0x0, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond_slave_1\x00', 0x3}, 0x18) 07:05:24 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000004000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000000000006a0a80fe001c00008500000053000000b70000000000000095000010000000004e6201363034fdb117168bd07ba08af339d1a1ee35fe2a3a255c33282044b324953c0a9fa9a84452569957c1002ed7d4d8e17f791f4798c8eb484de03352c69b3edff5be26765ba5f8f2879021c2ea53ea79acd7fb38fdf79f2be9087a3e7b1ef05d025e4dee8851d40c617b58c8108ddf12dddd4bfc6a4dd35383561cbe0402000000beba510b4229b0d4b5045100003e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a0578442926ef4e912f01a201e694e3806e8c8fe8b69524cd19f7525d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cfc794d8b9d7c33632152d88eaf302f0b2e21252bb66762dbfa4177a5ee917bca4885bbf597a14ab2458e6272d88e0c8088f404f011289ebc5623ea21182632161e073af1d69a2e3bbe115be3b325ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3a4c8b7ba032908c3367eb69ce3e4f306aca75825426dde87fdf4617222"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="c45c57ce395de5b2810f7d637a22", 0x0, 0xf0, 0x0, 0x0, 0x73, &(0x7f0000000000), &(0x7f0000000080)="5f633d871d4c63f878b764e18abb6d8ebf68a8903773176e90feb47e1baf455299fc347c1e6ef2feb71e94bdd8ccae32390a0e5d3727770f3ad149074bad28ba49011d223c0bf31e302354b450828e53786e070b7b338eef11d58ac8f38dcf0319120397d20fc7339899ee7d6d8a7cb3c8ed17"}, 0x40) 07:05:24 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x2000, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x400) r2 = accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x800, 0x6, 0xf1, 0x7}, {0x101, 0x1, 0x7, 0x851}, {0x62, 0xb, 0x7f, 0x7}]}, 0x10) r3 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(r3, &(0x7f0000002000)='/', 0x1) sendfile(r3, r3, &(0x7f0000000040), 0x82) sendfile(r3, r3, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r3, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/dev/lKop\x00\x00'], 0x0, 0x0, 0x0, 0x0) 07:05:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:24 executing program 4: syz_mount_image$btrfs(&(0x7f00000002c0)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="8da4363ac0ed0200000000000501004d010000000000000003007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x40000, 0x81) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x5}}, 0xa0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/btrfs-control\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x20b) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={r6}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000580)={r6, 0x93f}, &(0x7f00000005c0)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {r2, 0x3ff, 0x0, 0x0, 0x0, @ib={0x1b, 0x1ff, 0x3ff, {"1bb26234cc734ebfc51218542e6ea319"}, 0x7, 0x100000000, 0x1}, @ib={0x1b, 0x8000, 0x4, {"7a135719f10cfab486827a6718702490"}, 0x7391, 0x3, 0x7}}}, 0x118) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f00000000c0)=0x5) fchdir(r7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r7, &(0x7f00000001c0)="42ffd1a9b015848341b09c61e959920f7bc690ffa052f2cd79d8f28852186097e182d0b042c2ba927bca57b9af2d355beca7ec601152c7843309e3fb5726892b016e277dc1bbe92f7f689fbf0c80b21ce489c0e6a1c4716ca29842936a2919a365eeb4a6abe3ad388c01d7d6a28fd487fd552276235afb7b17e27570a7f6ba457486d39c03a513354f7af388c581de361d1f1c229f9b476d5a67847a0a5a99ca431691a113db075cb492a20ef28eb4c33824075fbafff11d845111cf6b257e015ffe43c381f904afa8a4db", &(0x7f0000000040)="daeedf9cd9ffd5d3e714d1e0a80789de4a62b633565fd78b7de65e84560aa94ef360a93bf17d69b7c4614d9d05940e7a03cad155ba27644c"}, 0x20) socketpair(0x4, 0x5, 0x20, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000540)) 07:05:24 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/136], 0x88) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 226.217554][T10021] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1b00920efd9a devid 0 transid 0 /dev/loop4 07:05:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:24 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000003) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000000c0)=0x5) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x80, 0x2, 0x2, 0x7, 0x40, 0x3, 0xd3, 0x2}, 0xb) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000240)={0x3, @pix_mp={0x7ff, 0x9, 0x38303553, 0x2, 0x0, [{0x7, 0x7}, {0x6, 0x1000}, {0x8}, {0x1, 0x6}, {0x82, 0x2}, {0x6, 0x68813c}, {0x8, 0x317}, {0x70ed, 0x2}], 0x3, 0x7c, 0x8, 0x1, 0xb}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) pipe(0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 07:05:24 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netfilter\x00') ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000100)) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0xfffffcd2, 0x2) r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) write$9p(r1, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9ca8bec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b60fca627576ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c46a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) socketpair(0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$dspn(0x0, 0x7, 0x200000) ioctl$VIDIOC_RESERVED(r5, 0x5601, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f00000001c0)={0x8}) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="a30b2c180000fccf03f29830d20724831a1a7d6d431198c5e02fc085ecf984301920f9bed0611782f659e2dcfc262ad77166f971"], 0x0) sendfile(r0, r3, 0x0, 0x10000) r6 = getpid() sched_setattr(r6, 0x0, 0xa395ae7b1f334a86) r7 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x1c3582) read$rfkill(r7, &(0x7f0000000000), 0x3) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x80}, 0xc) read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x3) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r9, 0x407, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) 07:05:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) sendto$inet6(r1, &(0x7f00000000c0)="8e7ae678617313ba8e530dff1193fc92848fc28925cd435b880fd62e7b171d31068439d6c5532ec3e80329e133dac3f2a51bb288724b9c6438ddf0ebdebd40904d8896dca0c29011c3043736e9c426ed0ff61a5cd488c3b6db1ea9c620f1f488104f71946c61c6996604c072940aaf7c9fbed2503bbf95b0ecddd7aa701a3e9da0b44a9e7087e1f5c36d050f9937782e60e7d9", 0x93, 0x40000, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @loopback, 0x1}, 0x1c) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000480)={0x4, &(0x7f0000000200)=[{}, {}, {}, {}]}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) write$smack_current(r2, &(0x7f0000000040)='GPL%-\x00', 0x6) sendmmsg$inet6(r0, &(0x7f0000005a40)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 07:05:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:25 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x417500, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) open(0x0, 0x14103e, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x14103e, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x80) accept$packet(r1, 0x0, &(0x7f0000000000)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000280)=0xff, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x44e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20045000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x44e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20045000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 226.522093][ T26] audit: type=1800 audit(1572764725.076:39): pid=10049 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16753 res=0 07:05:25 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 226.609898][ T26] audit: type=1804 audit(1572764725.106:40): pid=10049 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir826565923/syzkaller.F77V6n/68/file0" dev="sda1" ino=16753 res=1 07:05:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) 07:05:25 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x417500, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) open(0x0, 0x14103e, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x14103e, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x80) accept$packet(r1, 0x0, &(0x7f0000000000)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000280)=0xff, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x44e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20045000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x44e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20045000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 07:05:25 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) 07:05:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) 07:05:25 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netfilter\x00') ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000100)) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0xfffffcd2, 0x2) r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) write$9p(r1, &(0x7f0000000800)="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", 0x600) socketpair(0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$dspn(0x0, 0x7, 0x200000) ioctl$VIDIOC_RESERVED(r5, 0x5601, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f00000001c0)={0x8}) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="a30b2c180000fccf03f29830d20724831a1a7d6d431198c5e02fc085ecf984301920f9bed0611782f659e2dcfc262ad77166f971"], 0x0) sendfile(r0, r3, 0x0, 0x10000) r6 = getpid() sched_setattr(r6, 0x0, 0xa395ae7b1f334a86) r7 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x1c3582) read$rfkill(r7, &(0x7f0000000000), 0x3) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x80}, 0xc) read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x3) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r9, 0x407, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) 07:05:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:25 executing program 4: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4010, 0x9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) geteuid() accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) ioctl$TIOCNXCL(r4, 0x540d) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) r5 = getpgid(0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x0, r5}) sched_setaffinity(r5, 0x31f, &(0x7f0000000500)) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r6, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200}) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r7 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r7, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x4) sendfile(r1, r2, 0x0, 0x20000102000007) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000240)={0x0, 0x1, 0x1}) socket(0x200000000000011, 0x4000000000080002, 0x0) r8 = socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$team(0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) r10 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) accept4$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x80000) r12 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r12, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xfd) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r13, 0x40044591, &(0x7f00000000c0)=0x5) getsockname$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) r14 = socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r15, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r15, 0x0, 0x27, &(0x7f0000002d80)={@loopback, @local, r16}, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000a00)='/dev/snd/pcmC#D#c\x00', 0x101, 0x400) r17 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r17, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r17, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000006c0)=0xfffffffffffffe8d) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r18 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r18, 0x40044591, &(0x7f00000000c0)=0x5) r19 = accept$alg(r18, 0x0, 0x0) poll(&(0x7f00000001c0)=[{r19}], 0x1, 0x7) sendmsg$TEAM_CMD_PORT_LIST_GET(r14, 0x0, 0x4000) sendmsg(r8, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) 07:05:25 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x7) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) close(r1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x9}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e24, @multicast2}}}, 0x84) 07:05:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x2}) [ 227.514037][ T26] audit: type=1800 audit(1572764726.066:41): pid=10101 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16755 res=0 07:05:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000001c0)=0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x240, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)={0x0, 0xcbd, 0x4, [0x51, 0x7f, 0x3, 0x8000]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000300)={0x1, 0x5, 0x4dcd99ec43776f30, 0x5, 0x3, 0x2, 0x87, 0x7, r4}, &(0x7f0000000340)=0x20) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100101}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x310, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000000) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000180)) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000140)={0x3, 0x5, 0x5, 0xf}) finit_module(r5, &(0x7f0000000200)='\xd0+/\x00', 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='attr//screatu\x00\x8d-n\xf7t\xea\xa7(z%\xcd\x8f5|/m\xd6\x9c\xff') [ 227.665154][ T26] audit: type=1804 audit(1572764726.126:42): pid=10101 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir826565923/syzkaller.F77V6n/69/file0" dev="sda1" ino=16755 res=1 07:05:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x2}) 07:05:26 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:26 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xa2a5, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5000000010000307ebff000600e7000040040000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x200}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = dup2(r0, r1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2960c2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @empty}, &(0x7f0000000180)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x2, 0x7, 0x7fff, 0x8, 0x235, r3, 0x7fffffff, [], r4, r2, 0x5}, 0x3c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x100, 0x0) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000240)=0x6, 0x4) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f00000000c0)=0x5) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r8) 07:05:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 227.962949][T10128] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.074428][T10128] team0: Port device veth3 added 07:05:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x2}) 07:05:26 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netfilter\x00') ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000100)) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0xfffffcd2, 0x2) r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) write$9p(r1, &(0x7f0000000800)="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", 0x600) socketpair(0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$dspn(0x0, 0x7, 0x200000) ioctl$VIDIOC_RESERVED(r5, 0x5601, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f00000001c0)={0x8}) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="a30b2c180000fccf03f29830d20724831a1a7d6d431198c5e02fc085ecf984301920f9bed0611782f659e2dcfc262ad77166f971"], 0x0) sendfile(r0, r3, 0x0, 0x10000) r6 = getpid() sched_setattr(r6, 0x0, 0xa395ae7b1f334a86) r7 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x1c3582) read$rfkill(r7, &(0x7f0000000000), 0x3) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x80}, 0xc) read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x3) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r9, 0x407, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) [ 228.404113][ T26] audit: type=1800 audit(1572764726.956:43): pid=10152 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16731 res=0 [ 228.475224][ T26] audit: type=1804 audit(1572764726.956:44): pid=10152 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir826565923/syzkaller.F77V6n/70/file0" dev="sda1" ino=16731 res=1 07:05:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:27 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:27 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) close(r0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000680)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e24, @rand_addr=0x6}]}, &(0x7f00000006c0)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000740)={r3, @in={{0x2, 0x4e21, @empty}}}, 0x84) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/90, 0x5a}, {&(0x7f0000000240)=""/94, 0x5e}, {&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000000680)}, {&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f00000003c0)=""/83, 0x53}], 0x9, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x90, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000380), 0x2}, 0x807c, 0x0, 0x2000004}, r4, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() getpriority(0x1, r5) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000000)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r8 = socket(0xa, 0x3, 0x8) r9 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@nogrpid='nogrpid'}]}) r10 = gettid() waitid(0x83b895581628fca4, r10, &(0x7f0000000040), 0x2, &(0x7f0000000480)) r11 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r12 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r13 = dup2(r12, r11) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, &(0x7f0000000140)={0xef, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r13, 0xc08c5334, &(0x7f0000000200)) 07:05:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{}]}) 07:05:27 executing program 4: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4010, 0x9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) geteuid() accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) ioctl$TIOCNXCL(r4, 0x540d) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) r5 = getpgid(0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x0, r5}) sched_setaffinity(r5, 0x31f, &(0x7f0000000500)) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r6, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200}) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r7 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r7, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x4) sendfile(r1, r2, 0x0, 0x20000102000007) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000240)={0x0, 0x1, 0x1}) socket(0x200000000000011, 0x4000000000080002, 0x0) r8 = socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$team(0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) r10 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) accept4$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x80000) r12 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r12, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xfd) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r13, 0x40044591, &(0x7f00000000c0)=0x5) getsockname$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) r14 = socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r15, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r15, 0x0, 0x27, &(0x7f0000002d80)={@loopback, @local, r16}, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000a00)='/dev/snd/pcmC#D#c\x00', 0x101, 0x400) r17 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r17, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r17, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000006c0)=0xfffffffffffffe8d) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r18 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r18, 0x40044591, &(0x7f00000000c0)=0x5) r19 = accept$alg(r18, 0x0, 0x0) poll(&(0x7f00000001c0)=[{r19}], 0x1, 0x7) sendmsg$TEAM_CMD_PORT_LIST_GET(r14, 0x0, 0x4000) sendmsg(r8, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) 07:05:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{}]}) 07:05:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 228.632136][T10169] bridge0: port 3(gretap0) entered blocking state [ 228.665154][T10169] bridge0: port 3(gretap0) entered disabled state [ 228.750812][T10169] device gretap0 entered promiscuous mode 07:05:27 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 228.800285][T10169] bridge0: port 3(gretap0) entered blocking state [ 228.807287][T10169] bridge0: port 3(gretap0) entered forwarding state 07:05:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{}]}) 07:05:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 229.020355][T10169] XFS (loop2): Invalid superblock magic number 07:05:27 executing program 5 (fault-call:3 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:27 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 229.355143][T10215] FAULT_INJECTION: forcing a failure. [ 229.355143][T10215] name failslab, interval 1, probability 0, space 0, times 1 [ 229.394634][T10215] CPU: 1 PID: 10215 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 229.402557][T10215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.412622][T10215] Call Trace: [ 229.415914][T10215] dump_stack+0x1d8/0x2f8 [ 229.420245][T10215] should_fail+0x555/0x770 [ 229.424659][T10215] __should_failslab+0x11a/0x160 [ 229.429607][T10215] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 229.435341][T10215] should_failslab+0x9/0x20 [ 229.439842][T10215] __kmalloc+0x7a/0x340 [ 229.443990][T10215] ? tomoyo_realpath_from_path+0xca/0x7c0 [ 229.449694][T10215] tomoyo_realpath_from_path+0xdc/0x7c0 [ 229.455245][T10215] tomoyo_path_number_perm+0x166/0x640 [ 229.460705][T10215] ? rcu_lock_release+0x26/0x30 [ 229.465532][T10215] ? smack_file_ioctl+0x2a1/0x2e0 [ 229.470544][T10215] ? __fget+0x4e6/0x510 [ 229.474680][T10215] tomoyo_file_ioctl+0x23/0x30 [ 229.484545][T10215] security_file_ioctl+0x6d/0xd0 [ 229.489463][T10215] __x64_sys_ioctl+0xa3/0x120 [ 229.494119][T10215] do_syscall_64+0xf7/0x1c0 [ 229.498605][T10215] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 229.504489][T10215] RIP: 0033:0x459f49 [ 229.508370][T10215] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 229.528054][T10215] RSP: 002b:00007f8833600c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.536443][T10215] RAX: ffffffffffffffda RBX: 00007f8833600c90 RCX: 0000000000459f49 [ 229.544403][T10215] RDX: 00000000200000c0 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 229.552353][T10215] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 229.560302][T10215] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f88336016d4 [ 229.568253][T10215] R13: 00000000004c3656 R14: 00000000004d7630 R15: 0000000000000006 [ 229.587054][T10215] ERROR: Out of memory at tomoyo_realpath_from_path. 07:05:28 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) close(r0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000680)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e24, @rand_addr=0x6}]}, &(0x7f00000006c0)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000740)={r3, @in={{0x2, 0x4e21, @empty}}}, 0x84) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/90, 0x5a}, {&(0x7f0000000240)=""/94, 0x5e}, {&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000000680)}, {&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f00000003c0)=""/83, 0x53}], 0x9, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x90, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000380), 0x2}, 0x807c, 0x0, 0x2000004}, r4, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() getpriority(0x1, r5) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000000)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r8 = socket(0xa, 0x3, 0x8) r9 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@nogrpid='nogrpid'}]}) r10 = gettid() waitid(0x83b895581628fca4, r10, &(0x7f0000000040), 0x2, &(0x7f0000000480)) r11 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r12 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r13 = dup2(r12, r11) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, &(0x7f0000000140)={0xef, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r13, 0xc08c5334, &(0x7f0000000200)) 07:05:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:28 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:28 executing program 4: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4010, 0x9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) geteuid() accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) ioctl$TIOCNXCL(r4, 0x540d) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) r5 = getpgid(0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x0, r5}) sched_setaffinity(r5, 0x31f, &(0x7f0000000500)) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r6, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200}) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r7 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r7, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x4) sendfile(r1, r2, 0x0, 0x20000102000007) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000240)={0x0, 0x1, 0x1}) socket(0x200000000000011, 0x4000000000080002, 0x0) r8 = socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$team(0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) r10 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) accept4$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x80000) r12 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r12, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xfd) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r13, 0x40044591, &(0x7f00000000c0)=0x5) getsockname$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) r14 = socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r15, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r15, 0x0, 0x27, &(0x7f0000002d80)={@loopback, @local, r16}, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000a00)='/dev/snd/pcmC#D#c\x00', 0x101, 0x400) r17 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r17, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r17, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000006c0)=0xfffffffffffffe8d) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r18 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r18, 0x40044591, &(0x7f00000000c0)=0x5) r19 = accept$alg(r18, 0x0, 0x0) poll(&(0x7f00000001c0)=[{r19}], 0x1, 0x7) sendmsg$TEAM_CMD_PORT_LIST_GET(r14, 0x0, 0x4000) sendmsg(r8, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) 07:05:28 executing program 5 (fault-call:3 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 229.886962][T10237] FAULT_INJECTION: forcing a failure. [ 229.886962][T10237] name failslab, interval 1, probability 0, space 0, times 0 07:05:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 230.015438][T10237] CPU: 1 PID: 10237 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 230.023356][T10237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.023370][T10237] Call Trace: [ 230.023385][T10237] dump_stack+0x1d8/0x2f8 [ 230.023402][T10237] should_fail+0x555/0x770 [ 230.045633][T10237] __should_failslab+0x11a/0x160 [ 230.050582][T10237] ? tomoyo_encode2+0x273/0x5a0 [ 230.055429][T10237] should_failslab+0x9/0x20 [ 230.055442][T10237] __kmalloc+0x7a/0x340 [ 230.055458][T10237] tomoyo_encode2+0x273/0x5a0 [ 230.055474][T10237] ? anon_inodefs_init_fs_context+0x70/0x70 [ 230.055485][T10237] tomoyo_realpath_from_path+0x769/0x7c0 [ 230.055502][T10237] tomoyo_path_number_perm+0x166/0x640 [ 230.055534][T10237] ? rcu_lock_release+0x26/0x30 [ 230.055541][T10237] ? smack_file_ioctl+0x2a1/0x2e0 [ 230.055550][T10237] ? __fget+0x4e6/0x510 [ 230.055565][T10237] tomoyo_file_ioctl+0x23/0x30 [ 230.055576][T10237] security_file_ioctl+0x6d/0xd0 [ 230.055588][T10237] __x64_sys_ioctl+0xa3/0x120 [ 230.055603][T10237] do_syscall_64+0xf7/0x1c0 [ 230.068886][T10237] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.068896][T10237] RIP: 0033:0x459f49 [ 230.068907][T10237] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 230.068913][T10237] RSP: 002b:00007f8833600c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.068922][T10237] RAX: ffffffffffffffda RBX: 00007f8833600c90 RCX: 0000000000459f49 07:05:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:28 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 230.068927][T10237] RDX: 00000000200000c0 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 230.068937][T10237] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 230.096155][T10237] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f88336016d4 [ 230.096161][T10237] R13: 00000000004c3656 R14: 00000000004d7630 R15: 0000000000000006 [ 230.153920][T10237] ERROR: Out of memory at tomoyo_realpath_from_path. [ 230.166025][T10236] XFS (loop2): Invalid superblock magic number 07:05:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:28 executing program 5 (fault-call:3 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) [ 230.510634][T10270] FAULT_INJECTION: forcing a failure. [ 230.510634][T10270] name failslab, interval 1, probability 0, space 0, times 0 [ 230.557416][T10270] CPU: 1 PID: 10270 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 230.565947][T10270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.576097][T10270] Call Trace: [ 230.579390][T10270] dump_stack+0x1d8/0x2f8 [ 230.583728][T10270] should_fail+0x555/0x770 [ 230.588169][T10270] __should_failslab+0x11a/0x160 [ 230.593106][T10270] ? tomoyo_encode2+0x273/0x5a0 [ 230.597958][T10270] should_failslab+0x9/0x20 [ 230.602535][T10270] __kmalloc+0x7a/0x340 [ 230.606698][T10270] tomoyo_encode2+0x273/0x5a0 [ 230.611391][T10270] ? anon_inodefs_init_fs_context+0x70/0x70 [ 230.617287][T10270] tomoyo_realpath_from_path+0x769/0x7c0 [ 230.622925][T10270] tomoyo_path_number_perm+0x166/0x640 [ 230.628405][T10270] ? rcu_lock_release+0x26/0x30 [ 230.633253][T10270] ? smack_file_ioctl+0x2a1/0x2e0 [ 230.638273][T10270] ? __fget+0x4e6/0x510 [ 230.642436][T10270] tomoyo_file_ioctl+0x23/0x30 [ 230.647287][T10270] security_file_ioctl+0x6d/0xd0 [ 230.652397][T10270] __x64_sys_ioctl+0xa3/0x120 [ 230.657088][T10270] do_syscall_64+0xf7/0x1c0 [ 230.661594][T10270] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.667488][T10270] RIP: 0033:0x459f49 [ 230.671381][T10270] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 230.691075][T10270] RSP: 002b:00007f8833600c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.699488][T10270] RAX: ffffffffffffffda RBX: 00007f8833600c90 RCX: 0000000000459f49 [ 230.707449][T10270] RDX: 00000000200000c0 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 230.715422][T10270] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 230.723388][T10270] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f88336016d4 [ 230.731340][T10270] R13: 00000000004c3656 R14: 00000000004d7630 R15: 0000000000000006 07:05:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e22, @loopback}, 0x200, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000080)='nr0\x00', 0x0, 0x7ef, 0x8000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 07:05:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:05:29 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 230.814190][T10270] ERROR: Out of memory at tomoyo_realpath_from_path. 07:05:29 executing program 4: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4010, 0x9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) geteuid() accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) ioctl$TIOCNXCL(r4, 0x540d) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) r5 = getpgid(0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x0, r5}) sched_setaffinity(r5, 0x31f, &(0x7f0000000500)) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r6, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200}) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r7 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r7, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x4) sendfile(r1, r2, 0x0, 0x20000102000007) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000240)={0x0, 0x1, 0x1}) socket(0x200000000000011, 0x4000000000080002, 0x0) r8 = socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$team(0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) r10 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) accept4$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x80000) r12 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r12, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xfd) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r13, 0x40044591, &(0x7f00000000c0)=0x5) getsockname$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) r14 = socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r15, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r15, 0x0, 0x27, &(0x7f0000002d80)={@loopback, @local, r16}, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000a00)='/dev/snd/pcmC#D#c\x00', 0x101, 0x400) r17 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r17, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r17, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000006c0)=0xfffffffffffffe8d) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r18 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r18, 0x40044591, &(0x7f00000000c0)=0x5) r19 = accept$alg(r18, 0x0, 0x0) poll(&(0x7f00000001c0)=[{r19}], 0x1, 0x7) sendmsg$TEAM_CMD_PORT_LIST_GET(r14, 0x0, 0x4000) sendmsg(r8, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) 07:05:29 executing program 5 (fault-call:3 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:05:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:29 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 231.190057][T10302] FAULT_INJECTION: forcing a failure. [ 231.190057][T10302] name failslab, interval 1, probability 0, space 0, times 0 [ 231.249290][T10302] CPU: 0 PID: 10302 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 231.257208][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.267301][T10302] Call Trace: [ 231.270611][T10302] dump_stack+0x1d8/0x2f8 [ 231.274953][T10302] should_fail+0x555/0x770 [ 231.279374][T10302] __should_failslab+0x11a/0x160 [ 231.284326][T10302] ? kvm_arch_vcpu_ioctl+0x1b5a/0x4510 [ 231.289865][T10302] should_failslab+0x9/0x20 [ 231.289877][T10302] __kmalloc_track_caller+0x79/0x340 [ 231.289891][T10302] memdup_user+0x25/0xa0 [ 231.289902][T10302] kvm_arch_vcpu_ioctl+0x1b5a/0x4510 [ 231.289912][T10302] ? kvm_vcpu_ioctl+0x114/0xaf0 [ 231.289940][T10302] kvm_vcpu_ioctl+0x585/0xaf0 [ 231.318636][T10302] ? kvm_vm_release+0x50/0x50 [ 231.323297][T10302] do_vfs_ioctl+0x744/0x1730 [ 231.327875][T10302] ? __fget+0x4e6/0x510 [ 231.332012][T10302] ? tomoyo_file_ioctl+0x23/0x30 [ 231.336949][T10302] ? security_file_ioctl+0xa1/0xd0 [ 231.342060][T10302] __x64_sys_ioctl+0xe3/0x120 [ 231.346741][T10302] do_syscall_64+0xf7/0x1c0 [ 231.351229][T10302] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 231.357097][T10302] RIP: 0033:0x459f49 [ 231.360980][T10302] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 231.380564][T10302] RSP: 002b:00007f8833600c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.388964][T10302] RAX: ffffffffffffffda RBX: 00007f8833600c90 RCX: 0000000000459f49 07:05:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 231.396913][T10302] RDX: 00000000200000c0 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 231.404861][T10302] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 231.412825][T10302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f88336016d4 [ 231.420776][T10302] R13: 00000000004c3656 R14: 00000000004d7630 R15: 0000000000000006 07:05:30 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000140)) sendmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000600)="cb", 0x1}], 0x1}}], 0x1cb, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 07:05:30 executing program 5 (fault-call:3 fault-nth:4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:30 executing program 3 (fault-call:10 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @vti={{0x8, 0x1, 'vti6'}, {0x3c, 0x2, [@vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @loopback}, @IFLA_VTI_REMOTE={0x8}, @IFLA_VTI_REMOTE={0x8, 0x5, @empty}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x9}, @IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x900}]]}}}]}, 0x68}}, 0x0) 07:05:30 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_retopts={{0x68, 0x0, 0x7, {[@ra={0x94, 0x6, 0x4}, @generic={0x89, 0x11, "af56e465124d357e811a2af1e9975c"}, @ra={0x94, 0x6, 0x7ff}, @ssrr={0x89, 0xf, 0xff, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1]}, @lsrr={0x83, 0x7, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0xf, 0xf0, [@dev={0xac, 0x14, 0x14, 0x1d}, @multicast1, @broadcast]}, @generic={0x83, 0x12, "e1ac7c7b75033a41df5779c2497c3cd3"}, @noop, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @rand_addr=0x5}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff6031}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x118}, 0x0) restart_syscall() 07:05:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:30 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x408080, 0x0) sysfs$2(0x2, 0x0, &(0x7f0000000280)=""/1) clone(0x42540000, &(0x7f0000000480)="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", &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)="1bca2e23212c14b67dff6409b73c5c413941a0f3100bcf2b2b443da20a545b970fd2cce88da31ad12906ab78cb5a27aeec3c8e8ad29d140a68cf7e0f60ed3c51c60017fc46411df737fead7d50ae573a32add85581eebc6a447fc422cbdcd6a9ef4e254f4fd18f4e3096c7f2f9") lsetxattr$security_ima(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x1) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000001580)={{0x6, 0x4}, 'port1\x00', 0x8, 0x8, 0x80000001, 0x20, 0x7, 0x2, 0x5, 0x0, 0x4, 0xffffffff}) fsetxattr$security_smack_entry(r0, &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000240)='\x00\x00\x00\x00\a\x00', 0x6, 0x1) syz_mount_image$btrfs(&(0x7f0000000000)='\x00\x00\x00\x00\a\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ad799210743f2a96d775423796", 0xfffffffffffffd79, 0x7ff}, {&(0x7f0000000140)="da33b49f1edf8151548c35c95690c39f666cdeb916b243aa2b87ddee9e727ef1524840f0b55c26827cdcadd63b86e6fcf6b122948c89b349ecc71516845a509013d11bfd0389e00e7204b26154f0d15597f06f9047db905cd6", 0x59, 0x400}, {&(0x7f0000000300)="251305a6277e803922b66348e02e333b00a1e5c2057d27b44585108c653c0738961985bc6e8c1356d283789074e35a91ff10fd28200d0da0b0ffd5d4f1f522b2f64d24dd647282a591785ae63383d5feb557233497a2dc5f9e5df6b87c56b38f6053a19c1c37ccfd7c71d2192651703e05d52518d2232da51ae38c4e491e3e32476359a48f14c37311348b703fc05e110fa192768529e81483a3b8f9c0b793313df80d3c7a7478feb189719281f8b719fd578b39f8ca8f0ecfb61fe720ac21b7a675d3f7f85a40e8e9764f47e13f56f615728f39341e2da42e89b82fbd48c130bf054146f54f4d6be5fdfe0e182e3592dd880d4357227d9d53f248e7a0934f", 0xff, 0x7}], 0x0, 0x0) 07:05:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='\x19\x03\xffw/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0xfffffffffffffffb, 0x4a, 0x81, @buffer={0x0, 0x7e, &(0x7f0000000300)=""/126}, &(0x7f00000003c0)="847f3273c5a3eec8cdbdad71e0598b0e6f2df8d2263f094b7d2ba9d189dbd3ded8ebb4e0489d6052fbe889222fdc9cc63bfe1ca24d93601fc704d2becbdfdb50e5b2f32be169c71a3a55", 0x0, 0x1ff, 0x4, 0x2, &(0x7f0000000100)}) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x9e685ac8a8e3a5e9, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000000c0)=0x5) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x40000, 0x0) open(&(0x7f0000000640)='./file0\x00', 0xd000, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 07:05:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x2, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:31 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x2, 0x0) [ 232.539896][T10366] IPVS: ftp: loaded support on port[0] = 21 07:05:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x10, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x127a, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:31 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x10, 0x0) 07:05:31 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="700100002400070500"/20, @ANYRES32, @ANYBLOB="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"], 0x170}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924c57, 0x0) [ 233.045582][T10408] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.4'. [ 233.137786][T10412] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.4'. [ 233.295874][T10366] IPVS: ftp: loaded support on port[0] = 21 07:05:31 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, r2) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="580000001400192340834b8004bf679a2cffff7f4e32f61b26a054e8b0f23d12cdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0ff00ff050000000010000100090ac2d00b0ccbd8", 0x58}], 0x1) 07:05:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x2289, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:31 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:31 executing program 4: io_setup(0xff, &(0x7f0000000100)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)}], 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) ioctl$TCSETAF(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) ioctl$TCSETAF(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)) ioctl$TCSETAF(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETAF(r4, 0x5423, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETAF(r6, 0x5423, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/autofs\x00', 0x0, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f00000000c0)=0x5) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f00000000c0)=0x5) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r9, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@remote, @in6=@mcast2}}, {{@in=@dev}, 0x0, @in=@remote}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r11 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r11, &(0x7f0000000040)={0x30}, 0x0) semget$private(0x0, 0x0, 0x0) getpid() lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r12, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x6) ioctl$TCSETAF(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) lstat(0x0, &(0x7f00000035c0)) semget$private(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000003a00)='/dev/qat_adf_ctl\x00', 0x83640, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x27c842, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_open_dev$sndmidi(0x0, 0x8, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r13, 0x5423, &(0x7f0000000080)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r14, 0x5423, &(0x7f0000000080)) ioctl$TCSETAF(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x6) ioctl$TCSETAF(0xffffffffffffffff, 0x5423, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r15, 0x5423, &(0x7f0000000080)=0x6) socket(0x0, 0x0, 0x0) r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r16, 0x5423, &(0x7f0000000080)) ioctl$TCSETAF(r16, 0x5423, &(0x7f0000000040)) ioctl$TCSETAF(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) ioctl$TCSETAF(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5423, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000003b00)='/dev/video35\x00', 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5423, 0x0) stat(&(0x7f0000004e80)='.\x00', &(0x7f0000004ec0)) ioctl$TCSETAF(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) pipe2(0x0, 0x400) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) ioctl$TCSETAF(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000004f80)='/dev/video35\x00', 0x2, 0x0) clone3(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) lstat(0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x1}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf025}, 0x0, 0x0, 0x7}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000005640)='cgroup.procs\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000059c0)) semget$private(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 07:05:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x1276, 0x0) 07:05:32 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x2400, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x4c01, 0x0) 07:05:32 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:32 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f0000000200)=[r1]) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000300)) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') 07:05:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x2402, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:32 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x5411, 0x0) 07:05:32 executing program 4: get_robust_list(0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x85) symlink(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000100)='./file1\x00') quotactl(0x2080000201, &(0x7f0000000140)='./file0/../file0/file0\x00', 0x0, &(0x7f0000000580)="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") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r2, 0x0, r3) accept4(r2, &(0x7f00000004c0)=@isdn, &(0x7f0000000480)=0xffffffffffffffca, 0xf22bcd4114abef59) fcntl$getownex(r1, 0x10, &(0x7f0000000700)) chroot(&(0x7f0000000000)='./file0/../file0\x00') r4 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file1\x00', 0x800000000e004, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000240)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x1fc, 0x0) write$binfmt_aout(r7, &(0x7f0000000300)=ANY=[@ANYRES16=r5], 0x2) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0x2, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r7, r7, &(0x7f0000000000)=0x1, 0x2000001) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) pwrite64(r4, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r4, 0x0) lseek(r4, 0x0, 0x2) sendfile(r5, r0, &(0x7f0000000440), 0x3) creat(&(0x7f0000000100)='./file1/file0\x00', 0x80) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) sendfile(r4, r4, &(0x7f00000001c0), 0x7f8) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') chown(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x0) 07:05:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x2405, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) [ 234.257146][T10481] overlayfs: missing 'lowerdir' 07:05:32 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:33 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f0000000200)=[r1]) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000300)) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') 07:05:33 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4c00, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:05:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x5421, 0x0) 07:05:33 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000200)={0x7}, 0x7) fsync(r2) 07:05:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:05:33 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000200)={0x7}, 0x7) fsync(r2) 07:05:33 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) close(r0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x20002, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000300)=""/164, &(0x7f00000000c0)=0xa4) sendmmsg$inet_sctp(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000100)="ba", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x18c, 0x44810}], 0x1, 0x40) 07:05:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4c01, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x5450, 0x0) 07:05:33 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x420800, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0xa) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xbb8) 07:05:33 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000200)={0x7}, 0x7) fsync(r2) 07:05:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:05:34 executing program 4: sigaltstack(&(0x7f00006ab000/0x3000)=nil, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 07:05:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4c80, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:34 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000200)={0x7}, 0x7) fsync(r2) 07:05:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x5451, 0x0) 07:05:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:34 executing program 4: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(0x0, 0x282600, 0x2) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video0\x00', 0x2, 0x0) r2 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0x80, 0x840000) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000500)) ptrace$setopts(0xffffffffffffffff, 0x0, 0x10001, 0x111) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x81, 0x0, 0x0, 0x3, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @perf_bp={&(0x7f00000001c0), 0x9}, 0x0, 0xe7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0x0) setpriority(0x0, r3, 0x100) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) r4 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r4) setpgid(0x0, 0xffffffffffffffff) r5 = syz_open_dev$loop(&(0x7f00000005c0)='/dev#\x00\x00\x00\a\x00', 0x0, 0x10182) r6 = gettid() kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r5) r7 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) r8 = gettid() kcmp(r8, 0x0, 0x0, 0xffffffffffffffff, r7) setpgid(r8, 0xffffffffffffffff) r9 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r9) setpgid(0x0, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) r10 = gettid() setpgid(r10, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r6, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={0xffffffffffffffff, r0, 0xff}) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='securi5\x81.cap\x1d\x1c\x9c+ity\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x10000, 0x6}, {0xffffffff00000000}]}, 0x14, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000640)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000540)='wlan1\x00', &(0x7f00000002c0)='proc\x00']) 07:05:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x5421, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) [ 235.768238][T10587] 9pnet: Insufficient options for proto=fd 07:05:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x5452, 0x0) 07:05:34 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000200)={0x7}, 0x7) fsync(r2) [ 236.108201][T10614] 9pnet: Insufficient options for proto=fd 07:05:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x5434, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:34 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000200)={0x7}, 0x7) fsync(r2) 07:05:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') fsetxattr$trusted_overlay_upper(r1, &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x94, 0x2, 0xf6, "3140cf3272c01f14e12d2025aa25a93c", "50111fbc7411d9143e65081490fea03c460725ef5effaefaba30b3be75fa9bdb69f9227ebd30713f90b7e8321609db4e166537aa38af303f866609e4ade93904d310966e5d7775d932529ab9925eaf4de6979bf6c986eb854eedb83974a11e6f7feb52ad9ae35b9f8095df3eea576d762dbd894f7a5746a7836c51c920ff04"}, 0x94, 0xb71eb0d1b8c2d06c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffe, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000002a5, 0x4008000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x15d202, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000000c0)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r6 = dup2(r4, r5) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000100)={0x1, r6}) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) [ 236.322811][T10627] 9pnet: Insufficient options for proto=fd 07:05:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x5460, 0x0) 07:05:34 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x115) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e50d00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000e208000100686866000c000200080002"], 0x3}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@ipv6_newroute={0x58, 0x18, 0x1, 0x2, 0x0, {0xa, 0x10, 0x70, 0x8, 0xfd, 0x3, 0xc8, 0x9, 0x400}, [@RTA_MARK={0x8, 0x10, 0xfffffff8}, @RTA_IIF={0x8}, @RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_PRIORITY={0x8, 0x6, 0x7}, @RTA_OIF={0x8, 0x4, r3}, @RTA_IIF={0x8}]}, 0x58}}, 0x0) 07:05:35 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 236.451233][T10633] IPv6: NLM_F_CREATE should be specified when creating new route 07:05:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x5450, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 236.565486][T10633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.572989][T10633] IPv6: NLM_F_CREATE should be set when creating new route [ 236.580531][T10633] IPv6: NLM_F_CREATE should be set when creating new route [ 236.587778][T10633] IPv6: NLM_F_CREATE should be set when creating new route [ 236.588254][T10640] 9pnet: Insufficient options for proto=fd 07:05:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x5451, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x6364, 0x0) 07:05:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_all\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000300)={0x401}, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000280)) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 07:05:35 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 236.917051][T10659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.977673][T10663] 9pnet: Insufficient options for proto=fd 07:05:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x800000000005, 0xffffffffffffffff, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000010000000000000009410000004c001800000f0062726f6164636173742d6c696e6b000000000000000000000000000000000008000000000000000000000000000000000000000000a0ffcfa5b6c5267900000000000000"], 0x68}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={r3, 0x80000000}, 0x8) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getresuid(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 07:05:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @local, 0x101}}}, &(0x7f0000000080)=0x90) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000000)={0x20, 0x2, 0x4, 0xffffffffffffff81, 0x9}) r5 = dup2(r1, r3) dup3(r5, r2, 0x0) 07:05:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x5452, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:35 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x8912, 0x0) 07:05:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 237.309281][T10692] 9pnet: Insufficient options for proto=fd 07:05:36 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x5460, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:36 executing program 2: r0 = semget$private(0x0, 0x0, 0x144) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x4280) semop(r0, &(0x7f0000000000)=[{0x2, 0x1, 0x1000}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioprio_get$uid(0x3, 0x0) 07:05:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x8933, 0x0) 07:05:36 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x14103e, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0xfffffffffffffdb1, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x3, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, r3, 0x0, 0x1, &(0x7f00000003c0)='\x00', r4}, 0x30) socket$inet(0x2, 0xa, 0x9) syz_open_procfs(0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x4, 0x1f, @name="1f936678f251d4220e71b8b6b8188e4849eee62d00c553c3506ad6e82f2f5d14"}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TCXONC(r0, 0x540a, 0x8000) getsockopt$inet_tcp_int(r6, 0x6, 0x10, &(0x7f0000000340), &(0x7f00000001c0)=0x4) bind$alg(r5, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000412ff8)='\x00\x00\x00\x00', 0x4) r7 = creat(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x1c400, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(r7, 0x5413, &(0x7f0000000240)) socket(0xa, 0x2, 0x0) r8 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) inotify_init() setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x15000000000000, 0x485, 0x6, 0x0) 07:05:36 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 237.685299][T10716] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) 07:05:36 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) utimes(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)) socket$caif_stream(0x25, 0x1, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 07:05:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x5607, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae01, 0x0) 07:05:36 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x9, 0x1}, 0xee, 0x40, &(0x7f0000000100)={0x2, 0x16, 0x101, 0x4f6, 0x7ff}, 0x8, 0x9, 0x0, 0x0, 0x61, 0x5, &(0x7f00000002c0)="4cf9625f7015dfe8c60115de113c389d38775014e5e7ee46d9b4579b3b42032b486079d1cbb3b1a538b4aef84d0191c56dcb3d34a8e6be80338b0447f886cc9ae6f8be648e8aa71e3bd1fa4eee5a1bc946d88df2bc758c0a2f501e4f4ac64c61c8339655b6b60aac9aa086d0030d4ab8b22953f202b4d5415a73c44d8b0c367de1372abf27bed7c1dcc425002ec3ef8f543fa21c738992c42811b853118f72fc969adafbdd0acf3dddb4cc15515a19035625d71ead8b3adb467b0fde50cd649db4f755236862240ba4"}) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/135, 0x87) 07:05:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x6364, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:36 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae41, 0x0) 07:05:36 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x7014, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:37 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040)=0x6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@setlink={0x20, 0x13, 0x1}, 0x20}}, 0x0) 07:05:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x40044591, 0x0) 07:05:37 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(0x0, 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:37 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 07:05:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x890b, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:37 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 07:05:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x8912, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:37 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(0x0, 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:37 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0006000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) r2 = dup2(r1, 0xffffffffffffffff) recvmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000000c0)=@nl=@proc, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/238, 0xee}], 0x1}, 0x14180) 07:05:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x400454ca, 0x0) 07:05:37 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) r3 = inotify_init1(0x0) r4 = gettid() fcntl$setown(r3, 0x8, r4) r5 = getpgrp(r4) ptrace$peek(0xffffffffffffffff, r5, &(0x7f0000000040)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x1}) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$SIOCRSACCEPT(r6, 0x89e3) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f00000000c0)=0x5) sendfile(r1, r7, 0x0, 0x800000bf) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x5000, 0x7000, 0x4, 0x8, 0x3, 0x5, 0x6, 0x5, 0x80, 0xdc, 0x7, 0x40}, {0xd000, 0x1, 0x5, 0x7f, 0x7f, 0x7, 0x8, 0x1, 0x82, 0x20, 0x9, 0x20}, {0xc1279047c49a2fe5, 0x2, 0x2, 0x4, 0x6e, 0x7f, 0x20, 0x5, 0x1, 0x0, 0x1f, 0x4}, {0x10000, 0x4, 0xd, 0x80, 0xfd, 0x9, 0x1, 0x5, 0x9, 0x1, 0x7}, {0x2000, 0xd000, 0x4, 0x1, 0x40, 0x3f, 0x4, 0x40, 0x4, 0x7f, 0x6, 0x5}, {0x2000, 0x3004, 0xb, 0x4, 0x7f, 0x12, 0x8, 0x7, 0x3f, 0x1f, 0x1f, 0x1f}, {0x2000, 0x2000, 0xf, 0x0, 0x2, 0x6, 0x3, 0x2, 0xf6, 0x8, 0x7f, 0x6}, {0x3000, 0x1000, 0xb, 0x1f, 0x7, 0x3c, 0x1, 0xb5, 0x40, 0x2, 0x7, 0x3}, {0x4000, 0x6000}, {0x1001, 0x4000}, 0x4, 0x0, 0x4, 0x100000, 0x6, 0x1, 0x1d2159292bf6ecaa, [0xfff, 0x7fff, 0x7, 0x1]}) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080)=0x0) setpriority(0x3, r8, 0x2) [ 239.133578][T10795] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 239.225871][T10795] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. 07:05:37 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 07:05:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x8914, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:38 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0006000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) r2 = dup2(r1, 0xffffffffffffffff) recvmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000000c0)=@nl=@proc, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/238, 0xee}], 0x1}, 0x14180) [ 239.523614][T10825] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 07:05:38 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(0x0, 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x40045568, 0x0) 07:05:38 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:05:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x8918, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b00000001a00110300000000000000001c0000000000000000000000840013000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001df7dcfd6b3862d7e5acdb6081c55201b0a59fe9eef9b58b4dcd9352cb8245468c9df6dee210bc3310127e35cee0e92e80b5ad54f7f66d3f56"], 0xa0}}, 0x0) [ 239.574885][T10825] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. 07:05:38 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x8933, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 07:05:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl(r0, 0x4000, &(0x7f0000000000)="a2000300e7d9dfd5ec0ab408341700072f00000000") r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="2400000019002551075c0165ff0ffc02802000030011000500e1000c080003008000a000", 0x24) 07:05:38 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:05:38 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:38 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) socket$inet_udp(0x2, 0x2, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r3 = syz_open_dev$sndpcmc(&(0x7f0000001740)='/dev/snd/pcmC#D#c\x00', 0x4, 0x200000) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000001980)=""/81) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000000c0)=0x5) connect$caif(r5, &(0x7f00000017c0)=@dbg={0x25, 0x39, 0x7f}, 0x18) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) sendmmsg$alg(r4, &(0x7f0000001700)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000000)="af016b0dc41dd3b9e3dc98df89ec1501a222e05ba6a4f3c19d8b77b3764b57d70da6c0fc532c4fe8370a30c47ea3dfbd524607d608eba9449b268fc86f506c296dbc2bff4f23bb44ed59f262bddfa2ead98dd085cfd83823a4acff0efeb3037cb3d9a9e3ffe84ee9401cd7716c4127a44467222e2712953d90f07e", 0x7b}, {&(0x7f00000000c0)="4ca0856d4b13c730a6fb3b5d20006dcd1d0b8cec10bd172285be3a47156c6b664636d7fb0ad9eda8f5cd5c5f7b4787ab857729445518fb77d5", 0x39}, {&(0x7f0000000240)="33c2b07b49587665403c99480e4fe3a6429dddab59147f529981380c063db3cfe1fcfce13a17d37ddf", 0x29}, {&(0x7f0000000280)="b3dbd30bb1c3d5a14a4dfb877761e766358895e1ec5a134a54e0e84ee921b700b4f3606e0da60ae938fb9f54e4de3cc8de85f39cd4273fea148b0a019193c25f3a6dcd85f4bb0e2a122ffdb2dae7252281467a8518cb8cf51496521144b2395b665ce95899c219988ad78debbf1bc9b4", 0x70}, {&(0x7f0000000300)="ec186ebe3fc54b2a6d76d4d86f0c2d3b6494076436f8d0", 0x17}, {&(0x7f0000000440)="7f03403cf8832135a8faf356e68bbe62ea0755867d7cd62a2118b87956659ada36bf0228238554794e6d7fce5d61a38874b6b78d0f5d5642b8ce1bd7bf45a6162c24f31d6ccfa41a59e63774d92416b22796eb735d86b948b1bed45b332d4faaf4b0d2019816ce16fdc12c23df476ca1416af61d1d1969419d7750d4aa7fcec170884dc71d1c4ade71d8dc702008a7ccf5ef41e5f7abcc60266919124a74ae7d7e2b49498afb1c22e433a0bc5342351d30148b2ca60c9ec60c70df65253178e43e3b7558437c6eca3048c4d08702e33725df5b1c80681c389a4eeddc446bcea520dfb93d10f9708ae30da0143ad9f8f883389d6d1440b0cba15bd340686d0ac91c78cb31a9b8b2180a53bb0e0677fdf99eab52297302b4e5b34cd9b1a92c92956bd5b19a22a30c9e997185e1e612919929597a47157c78b6372d106aa7eb3128574cefda32bc5d65416cd1988a98ef8a161572dd5d88a715869a0edcb8414644d9392c28044d057c78eb0a75e1a07862722556ce3df637cf84cbdf37afcb5829b963f0b458642fd6ac03bd87aca689a7ae187e1b247c9792651c5e539a655dc0c76dc5108e20df8f10a1b37288afb4ea17c63a982c303eb9ff908db53ca6dcb6553d1bc8df76ed9bc2eeabf739a211f322afee512b4e2d32a0d19212cc0f79451e8c15e4b16155774ce5a2cdc59354ef5c2094ad9d7e061694cd469bb48ebed7354b172260b114d70b8c6f5f4b6aff9e8b7cb238fe2fad6d273565eb0cb851e51ec02d99a4f91b7f72a8617003bb7144cfc63b0d847a3cceb732fb5d6fd1d1ac63dd8bdd5e0194e77576f35c9414610601c7581c16975065ca7865a2d587e36e8d57516b617ebd50107af1f46777a3314c2fc0a9a5da782695316560db7b7aae21744d7a54916f853d03993d985253cce070f0ff12afa6e7a4c8da7dcd52bdb5cca236eaebc897f1789d903878b0178456b2e023974769914ee5fde69fd75aa99be9c8d3affb473c7b2bb36cfca8471d214c5b38e248b78b1213c255760764817c70760b6d752d9e0b7c42b31a73db6f3460710c907ec17be166f7ed427310d21ba56a1fa8b9a1eb4a358a9adde9aceeebc078bd2fff782047eaf19490c34e3dd901d4f5b46df9ddb6ec06ededefef76c47adcad02c131b6cd5f85a5dbd160922389044c07f40520dc5746353668ca55e4004ba01e0fcd364249b75bc99fde7e7fccf802d5c8af5bb885866b19d280811ae080c56e1564719cea2b9b21f90d0f06fdc9e24cb17811971b134b736c14a4089bbb63f6cd48a7b34d6d4128ca7bab18cf4b23bc6f14e75476606515bcddd3ca3f80947392de1d8c87794979bff4f1be83dbe4719cc3e27d585adf86173acccff1b806c9e6cbcb075b63633754d201811101b39c111f648ed09a6ffc00af139afa8b9a88050792ba69d0dc187733a2dcfa70002d6f0ed21d94d8809df75e2799553e974fe673a17bd7eac740baa0012c068857331d9a3a0ef2e22a37a2b771ecc852ff44e19f9aaf48fed2fc67340e03da5e8e0e57397e9b702d4a382fc1bdb2b836a2ca0e0a99ee23f3fac4f43fffa1fb23ab5232e6d8c3b2a802c5c93d69fb3105f7328336d7901e7193236ab79f42477925be8995d619fd5a2f56923dddd6420b4d5d898030449378821d4519788293791a658bb4bd1da6aa02558ad07c7371ec61ba0cd5de5fb91835ecf92a6a2b1caae11231e2ee987d7be1c11df041217e2c80bee9c35814e2b9355a01c65b401c6c0c98386c08cfa098fbb58a20b3717111146343f9c32c694d67c1b9b67cb5d0e577621ff680304ba1498c30fc8a54bc1d074797015cb81b7a7758f7a1f9116228ed939622efcd2e43e66f88d7c14e873f6aa0eba8ad4dd14858329c2334e162d3c0757180aa16f1fc1946d7d7696e74e6ee0dd0d31ae4925e70be4902dc631dd7df5c6cf955ce78bdd1e470e32abf19b952abca532ec3b44739c61406166bcf27b9642c60ecc3970b5e8312e17c191ef47be6f03f63369fa33500b7246166da8e134262a95c888ac9afeae89afe78cd34972932c2f707d40173a134084f496c74c12a6a688d64e62432086c7a454bace118f777a27fd8c3189cdacf2cf73fea60783237fb5b73272d2da26fa6cff6fc8063dae0e01f563ce1c1c631363982bd95cd83772b4d398dce62249e8d80bb35645809403d8207aa951a088122ba0d30a18ea40a7a7eb512fa018f92c470ebca68f1d35e612a4b30917a3b428958d34f3bdb7cbf50377de8404458e2afbd2f6dfc5cc57c043a14e7cd15907a7ab363df74145e1ba3f0aebc12fc671d719c31a1b427c5d00e742cb93ffd8b84720f314871ed7046046221a6df7fdb7e85f3debdcf6b9b04c60f35c16907c6b720e45678ad03d31f6edbd363e9dc65c175d71a9d7d59214dfc977f7b858ea429e73bfa9b7986ca100b85a9b0d7c73dde9d04814e63a6446041f9abd57a479dbf0bbc8cc4d1a0a28c4dbc7d32f26f2f18ac02394a38bd01b2683fefecaa4b72bbe728637017e5ee8f9efdc5003f374b96aeaaab6e1f4fda59568b0752c3ba5c4f09b99d6517778aec2fd500828b5638f8c343383ab1607867638e606f48550356ed048d57d7002a3f6730cae32c47055cf5fbcae5639e1f75837ca0ca5002fe0e5e658e14e55f7cbbfd3486b5305a458d05cf7081e7bcac60775b0b29346bf4091683ff5a8f48bde8bfdba3709faf866245c19770b311d819f3523469fe121bffb26756b27d44dd1bafdd0131dab0df9d218f593d67bad3a639526d32d4a825689dd8f5f17cd9c51aa2cb103d4c69ff8754a755b3ee24501d3fcf3af1e99ddc44f508d3a908c8d2a54c0490b734fd5a7e3c25db8140b790e2ef835b2068f327537a12ddc75d7a20ab0ef1cab99b94340db960f697074118b186a5d2c774e06b54e6f816203049ba42e6bb722b84cb27d69454657e7d0eee2c6b0799191f662564ef022e99b3e39874c3d7b68e9cebc5a926e4010dbab1e10a5fbe6daca5f2793c9678b860b2e7164bc3bc0a6e2d74a18c8f199bf36dee9fba3e04df1bd039dc674813ff12108cc726de2c6e062ac4fdb879024d674c62a61f120b0c34ebdbf20fbb1911d34c2fd12850703a75ae57f4cbbde1d5530f43c1e156c3c4ce466b2a5950856fce52c5d57697e80f802e3bc59705cf7aa91842a9d38fcf844f3bd7ed729786efc6a05f6b558060751a70c51b6237d4c6a215a4cc98b581c6fabffab47b63939d898513d7ffbdc3e745fdcdb59c2b94af5a217fc81c438e6c4f473fbe1b49b3fc6f1dd15224373055a98fb2bf0958674779c674aafb3c9290ec73218b32932119361e1f9b3ce8e83a8c894e7ed266294c6657b59500b3b2c360da0fa6add1895419f2a940800824beade4f18928e641e6d7af8d406cd6ca0ecd2989c3ab452d7fb26af7dacf8f3f876a7208319faa814db07289f42ab43f9cb75b2e1bebbd075a246876a20e50ddef397cf037e70a86fe74716ca554a5f03a8a77ad6653304cf6bab28bffbe16dd79f5298cf92f28c106578afe254dd2a31143eb2344dc1a042a09f2d62a69af323f24ffc13a33332ff7a3d879785ea7b4ca742d8bc5cdca8e8644e7f2c07b76b6b3a1aa9e97d60abdd1044358ba11512af5bbed2236537520862b33e6996ae753ccb9b947c713c39e67ea946eef91f372213f476bf6b4122c115042991af700cc49c4eacda0c7586fa35aeeaf028abf4309a27fb0a2f8e443f1aae17760a4f17e6b5ef50e1c600dc7205b5a0b5bc726daec338d4f456f20fc6216216ad0272849f6939950605800aaabfdc1592446d62958a6d1986c21a1d81a00930afdb7026bcd38a220d741cfbf1415d64a8101ccbe8a942bf52dcd5fc2e6b15c88b76911b05f68ff1939f56ccb3f64a952453dc2f5f9492e05f3414228d317e35224047a40a93c08e8dbbedf686c766c99f63d74bb672bfff1d0f64c440243d2a9a2c8cee22a78cb215683af9fe19587a8d4173f3a85f90cd4f8e85b7a8b23ca19cf52fa60ab24f7b3ba3b23efca9f6ddcba283a6ba30791a7b95f9ab3640849ffc370f2698c910562ce2e88d9cf26f40e32d078c6c609bf9f49045af5f8286ec6aebf4ea7890670354dcd8d949e1229a994a3335eceb39eb42a651409373e2dac2f92f77c847ce54c599ed76876288bcb650cb9b83669b42483f37919e1ca1d5c950c2e11b5e1f5506ad34aee3f72b5280bb169c5cca84849cda8ca23d807bf17ca8a268b6b6e85b41e130f469a963e9df58e34207d89f1c3c47f22ec7ea95c8421d57c4a606b5260a59ec290d846a0d77cd94316f7056a23d499c5398dd4ec0ea7471b63f4e31b36d9db7d4bb974b078fe48b9096ca125327487cfa65a94218666eaf4b830af85060421aa62d11621ef66a1f50ba497483b8fd43f4df8bc7598466a5b7a8fa2c8ccdaec8f91563c81c25d6a25bcdeb91dcb3098bc0f1db618b58aa8862c6771a7567554c12bfa3c8028d700ea44627629a688c2ed13c0d1f9c3147bf7ff1887fa66c7ee037cf4cbac1d3e230419bccbe8dc016ccae8b8b8c2a6c265d8037d203755ecdb631c74cf791fe6555038b4359197494f173c9921e916cdfd2fd524c1b664aada70eb7f32121adef06413bff9beca243f10715dbb000ec51dd82ab416d9521bc429cee93f0280caf8ffd5f03104bf824677dd906c519d8e7f45114f9a254164a358da4f631e6e107305a5f720d94904399e63fc16fc68e110f819716cba5f28e1520e0a03e667c429dfee025fb4794747497e79b46846f3e0e29e48ac8024fa6f3cabc365556cd6ba26c2a58f9499c3273191d529e6248a2c4c4f34aadb744ee0389ea5a45fedcccae30c257446a03fd0ce4d4fc455507ad1609569592ae3e1acb1b7b22eaeb3ec4fe79a07aa2eb3c662a168843ecb6f8d308c91abc12db60a8a45990eadc7f4763b2c9f0c3cbf805946d15c44e29628de35fcd93e246ade64d6e3b54ec3cb7dba005cfd88c375e1cabee4a72aaddf42add66ce890a4461769fba7879ae887661b7ed60e94683b5d4594de0b99069b988df90ab4b6e6816e93cc35b74f46955c4ef84411b997e3f3ea2fc730e10e7be9f837ff71147dd5f85c137f38fa3ab3f1f7153175a2632f7fde4aced1b86788083d4073405954bf59180ad721c4198be52037f6d9a3b2cf54bdbfa8c97fb073fcb3f21e1ba6c1c56d744072ea0685a1e56c4435b9f05adc50fb1d869232c62ac6d7c18213bbab7b4ac1e9329f6471b4bbf170dd052cb195b9b820f9aa7328c6f41d47c9773dd07709a055f3f8a5060029dab2ed6a4bc88d5e4fc69962502762529dfd679410b49334d41b72cb98c50b6d28c8795f5068cbf3a151e9a4874786e0f9b100748483293dcfcd3bd873d6ca1e65b2f028b37880478333e4603f5c8f49ccf482532eccbe2738a9b152db122582eddd32beea487dcabeaa09ced8385d625a7ece69d270fb8dcd5b1a4763f42959d95d4bbe6bd248f9376d84dcf4fa49780ecf40e58c7cb54b430819b710bae852013c1564715d1441a090e7678e15b71a6465484573c9f434f71599f82d9e1e8470b998163b800ac9a612a46f0002ed83f5645ea725abb904324e2c9196192eeeefb7af84727025c2910a67ab54cdb7a89bd40f25b2acd58f29f5ccbc0fc8949daf440a6e06d1693a30d1e6c9218b2b8a5526012114263cdb3e87653f06af142f1c800a8d095654d305a368c28fed15863f895ee2b97a4bad9f53099cd235fb722fe04c071fb336efa07036c0", 0x1000}, {&(0x7f0000000340)="574ff1439beae12f8bd2c8cdf30d07510584f8938f90ee4c176d0905f634713a04b7e9b770e35427e1a0a2605791a4b61763b67b562c4852c64cb20244f44336d7304646db63", 0x46}, {&(0x7f0000001440)="f5dff41fc57b6065f7e4ddd54ec7d9fbdf2113b2beab53754c0bf1cc4af3cca70ed64736ae23720613a97602dd57bcdf63bf457b06a88817bc702bac93117867dd264b9eaab4f4e49927da000b552a974f001fe4f81e216b2f63f709d932ca3dcc682c2cc5e0b2d7df92adb3d88100924fd1be4b6c83c5488fcd5fb030cc3fde7ba3bcec4ec37197cf8be0f27cf17638f9c51a97053175ecf19e94c53884a116bc3842cd3343a907f61d8e8b934e3404cd", 0xb1}, {&(0x7f0000001500)="c4992a19baf85789d796bcd7449369dbc61667200a3c5c8e63773f7e526c2b1d1b7059ee03eb8da44424232133e0d49ebb40de62cd304807d9af48c8338a46e89e1884afc9632b00d956862193878a761bbf619b89206ffa54e4f96ee5d93f347c54c42d597a380ca10cee12a59173eec5e42d40527ec9db14c7bd8a", 0x7c}], 0x9, &(0x7f0000001640)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x80000000}, @assoc={0x18}], 0x90, 0x40000}], 0x1, 0x0) timer_create(0x1, &(0x7f0000001900)={0x0, 0x3d, 0x2, @thr={&(0x7f0000001800)="102d0a4ae89aa31455d41646dc1a947b021e687115781a2a3868c88472a46f227657b4db873e9bd0f9f4c7d3a1689e433389e3f2ebb65ca885d23174274a59e4d409938bb7df77fee7fc15fa367921c75ca7465a61a86d70fcff0f4bc4b5a31346c41db4b2e72fa9e93b333ec5d97236cb19179e0bda7916bb5641ef4276", &(0x7f0000001880)="367ea1d2a9c08cbd81f59bdb55dc0b07096bc63fdf9b94cfea667e3814379daba63a6c41c09a6ee505437f57dec3f87edee00e36626b107e63ef7da7a052891e47a63eab528efc05a151e7a2533f9955b0a9e0f234258ecad0866ffa39674eeedce4c0352211b78cfed0891996684fa88fe09e98"}}, &(0x7f0000001940)=0x0) timer_delete(r6) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001780)) 07:05:38 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:05:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xae01, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 07:05:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xae41, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 07:05:39 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:39 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x2e, 0x4, &(0x7f0000000100)=@framed={{}, [@alu={0x4, 0x5, 0x2, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x10}, 0x70) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x80) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x4, &(0x7f0000000080)=0x2) 07:05:39 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x0) fsync(r3) 07:05:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xae60, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:39 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) socket$inet_udp(0x2, 0x2, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r3 = syz_open_dev$sndpcmc(&(0x7f0000001740)='/dev/snd/pcmC#D#c\x00', 0x4, 0x200000) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000001980)=""/81) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000000c0)=0x5) connect$caif(r5, &(0x7f00000017c0)=@dbg={0x25, 0x39, 0x7f}, 0x18) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) sendmmsg$alg(r4, &(0x7f0000001700)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000000)="af016b0dc41dd3b9e3dc98df89ec1501a222e05ba6a4f3c19d8b77b3764b57d70da6c0fc532c4fe8370a30c47ea3dfbd524607d608eba9449b268fc86f506c296dbc2bff4f23bb44ed59f262bddfa2ead98dd085cfd83823a4acff0efeb3037cb3d9a9e3ffe84ee9401cd7716c4127a44467222e2712953d90f07e", 0x7b}, {&(0x7f00000000c0)="4ca0856d4b13c730a6fb3b5d20006dcd1d0b8cec10bd172285be3a47156c6b664636d7fb0ad9eda8f5cd5c5f7b4787ab857729445518fb77d5", 0x39}, {&(0x7f0000000240)="33c2b07b49587665403c99480e4fe3a6429dddab59147f529981380c063db3cfe1fcfce13a17d37ddf", 0x29}, {&(0x7f0000000280)="b3dbd30bb1c3d5a14a4dfb877761e766358895e1ec5a134a54e0e84ee921b700b4f3606e0da60ae938fb9f54e4de3cc8de85f39cd4273fea148b0a019193c25f3a6dcd85f4bb0e2a122ffdb2dae7252281467a8518cb8cf51496521144b2395b665ce95899c219988ad78debbf1bc9b4", 0x70}, {&(0x7f0000000300)="ec186ebe3fc54b2a6d76d4d86f0c2d3b6494076436f8d0", 0x17}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000340)="574ff1439beae12f8bd2c8cdf30d07510584f8938f90ee4c176d0905f634713a04b7e9b770e35427e1a0a2605791a4b61763b67b562c4852c64cb20244f44336d7304646db63", 0x46}, {&(0x7f0000001440)="f5dff41fc57b6065f7e4ddd54ec7d9fbdf2113b2beab53754c0bf1cc4af3cca70ed64736ae23720613a97602dd57bcdf63bf457b06a88817bc702bac93117867dd264b9eaab4f4e49927da000b552a974f001fe4f81e216b2f63f709d932ca3dcc682c2cc5e0b2d7df92adb3d88100924fd1be4b6c83c5488fcd5fb030cc3fde7ba3bcec4ec37197cf8be0f27cf17638f9c51a97053175ecf19e94c53884a116bc3842cd3343a907f61d8e8b934e3404cd", 0xb1}, {&(0x7f0000001500)="c4992a19baf85789d796bcd7449369dbc61667200a3c5c8e63773f7e526c2b1d1b7059ee03eb8da44424232133e0d49ebb40de62cd304807d9af48c8338a46e89e1884afc9632b00d956862193878a761bbf619b89206ffa54e4f96ee5d93f347c54c42d597a380ca10cee12a59173eec5e42d40527ec9db14c7bd8a", 0x7c}], 0x9, &(0x7f0000001640)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x80000000}, @assoc={0x18}], 0x90, 0x40000}], 0x1, 0x0) timer_create(0x1, &(0x7f0000001900)={0x0, 0x3d, 0x2, @thr={&(0x7f0000001800)="102d0a4ae89aa31455d41646dc1a947b021e687115781a2a3868c88472a46f227657b4db873e9bd0f9f4c7d3a1689e433389e3f2ebb65ca885d23174274a59e4d409938bb7df77fee7fc15fa367921c75ca7465a61a86d70fcff0f4bc4b5a31346c41db4b2e72fa9e93b333ec5d97236cb19179e0bda7916bb5641ef4276", &(0x7f0000001880)="367ea1d2a9c08cbd81f59bdb55dc0b07096bc63fdf9b94cfea667e3814379daba63a6c41c09a6ee505437f57dec3f87edee00e36626b107e63ef7da7a052891e47a63eab528efc05a151e7a2533f9955b0a9e0f234258ecad0866ffa39674eeedce4c0352211b78cfed0891996684fa88fe09e98"}}, &(0x7f0000001940)=0x0) timer_delete(r6) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001780)) 07:05:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x40082406, 0x0) 07:05:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:39 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x0) fsync(r3) 07:05:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xae80, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:39 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:05:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x401c5504, 0x0) 07:05:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xae9a, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:39 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:05:39 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x0) fsync(r3) 07:05:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xaea2, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:40 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:05:40 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) socket$inet_udp(0x2, 0x2, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r3 = syz_open_dev$sndpcmc(&(0x7f0000001740)='/dev/snd/pcmC#D#c\x00', 0x4, 0x200000) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000001980)=""/81) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000000c0)=0x5) connect$caif(r5, &(0x7f00000017c0)=@dbg={0x25, 0x39, 0x7f}, 0x18) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) sendmmsg$alg(r4, &(0x7f0000001700)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000000)="af016b0dc41dd3b9e3dc98df89ec1501a222e05ba6a4f3c19d8b77b3764b57d70da6c0fc532c4fe8370a30c47ea3dfbd524607d608eba9449b268fc86f506c296dbc2bff4f23bb44ed59f262bddfa2ead98dd085cfd83823a4acff0efeb3037cb3d9a9e3ffe84ee9401cd7716c4127a44467222e2712953d90f07e", 0x7b}, {&(0x7f00000000c0)="4ca0856d4b13c730a6fb3b5d20006dcd1d0b8cec10bd172285be3a47156c6b664636d7fb0ad9eda8f5cd5c5f7b4787ab857729445518fb77d5", 0x39}, {&(0x7f0000000240)="33c2b07b49587665403c99480e4fe3a6429dddab59147f529981380c063db3cfe1fcfce13a17d37ddf", 0x29}, {&(0x7f0000000280)="b3dbd30bb1c3d5a14a4dfb877761e766358895e1ec5a134a54e0e84ee921b700b4f3606e0da60ae938fb9f54e4de3cc8de85f39cd4273fea148b0a019193c25f3a6dcd85f4bb0e2a122ffdb2dae7252281467a8518cb8cf51496521144b2395b665ce95899c219988ad78debbf1bc9b4", 0x70}, {&(0x7f0000000300)="ec186ebe3fc54b2a6d76d4d86f0c2d3b6494076436f8d0", 0x17}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000340)="574ff1439beae12f8bd2c8cdf30d07510584f8938f90ee4c176d0905f634713a04b7e9b770e35427e1a0a2605791a4b61763b67b562c4852c64cb20244f44336d7304646db63", 0x46}, {&(0x7f0000001440)="f5dff41fc57b6065f7e4ddd54ec7d9fbdf2113b2beab53754c0bf1cc4af3cca70ed64736ae23720613a97602dd57bcdf63bf457b06a88817bc702bac93117867dd264b9eaab4f4e49927da000b552a974f001fe4f81e216b2f63f709d932ca3dcc682c2cc5e0b2d7df92adb3d88100924fd1be4b6c83c5488fcd5fb030cc3fde7ba3bcec4ec37197cf8be0f27cf17638f9c51a97053175ecf19e94c53884a116bc3842cd3343a907f61d8e8b934e3404cd", 0xb1}, {&(0x7f0000001500)="c4992a19baf85789d796bcd7449369dbc61667200a3c5c8e63773f7e526c2b1d1b7059ee03eb8da44424232133e0d49ebb40de62cd304807d9af48c8338a46e89e1884afc9632b00d956862193878a761bbf619b89206ffa54e4f96ee5d93f347c54c42d597a380ca10cee12a59173eec5e42d40527ec9db14c7bd8a", 0x7c}], 0x9, &(0x7f0000001640)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x80000000}, @assoc={0x18}], 0x90, 0x40000}], 0x1, 0x0) timer_create(0x1, &(0x7f0000001900)={0x0, 0x3d, 0x2, @thr={&(0x7f0000001800)="102d0a4ae89aa31455d41646dc1a947b021e687115781a2a3868c88472a46f227657b4db873e9bd0f9f4c7d3a1689e433389e3f2ebb65ca885d23174274a59e4d409938bb7df77fee7fc15fa367921c75ca7465a61a86d70fcff0f4bc4b5a31346c41db4b2e72fa9e93b333ec5d97236cb19179e0bda7916bb5641ef4276", &(0x7f0000001880)="367ea1d2a9c08cbd81f59bdb55dc0b07096bc63fdf9b94cfea667e3814379daba63a6c41c09a6ee505437f57dec3f87edee00e36626b107e63ef7da7a052891e47a63eab528efc05a151e7a2533f9955b0a9e0f234258ecad0866ffa39674eeedce4c0352211b78cfed0891996684fa88fe09e98"}}, &(0x7f0000001940)=0x0) timer_delete(r6) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001780)) 07:05:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) 07:05:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xaea3, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:40 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(0xffffffffffffffff) 07:05:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xaead, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x4020ae46, 0x0) 07:05:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:40 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(0xffffffffffffffff) 07:05:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xaeb7, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 07:05:41 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(0xffffffffffffffff) 07:05:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x40044591, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:41 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6c6f7765726469723d0e3a66687c6530"]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x179, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r6, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000780)=0xc) setuid(r13) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r14, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$NS_GET_OWNER_UID(r14, 0xb704, &(0x7f0000000100)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000000700)=0xe8) setuid(r15) r16 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r16, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r18) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r19) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c1200001800e18526bd7000ffdbdf25fc0026000400530080000d0004b9a31a1af0f4971fda76ca62d516c202ff5e6a7b748e562012a412097bae499858f171dee079d73af6b33707a65c289e764766183b032bec706bec8fe3d37d6ce46ca1eeaa798588f10bded9d0f9c3921a895649d4f40c34458370f0282941be96f2d83e66466e9442f9e1495eb458b14043a32e935951ec000000ff56dbe67982654bcf0bd01a57fef1bd448dfa2eaf485224aa7e9fc373bdcce50527a05df0307f2b17", @ANYRES32=r5], 0x2}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="28e60000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r17, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r3, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r19, @ANYBLOB="00000000dbfb02473711fad0bed948addc8e2163de491245d4175f3a59aa1dbe0fd43fe005360e423177a16edbd9f3d0467e99d1e749f05394485ba6fde91ddbebf98c35148310d8cd3b7adcbd17e2ad7dc724ac6bf715d3ec3607118e62d3d71fcf11072a43672c3a7f42493d08edb81d1fa51b603cb45d"], 0x19c, 0x4040040}, 0x4000000) fchownat(r0, &(0x7f0000000140)='./control\x00', r2, r9, 0x1100) open(&(0x7f000054eff8)='./file0\x00', 0x6c00, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x81, 0xff01, 0x6, 0x4, 0x1a, 0x7, 0x8, 0x67, 0x401}) 07:05:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 242.711865][T11016] overlayfs: failed to resolve '': -2 07:05:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x405c5503, 0x0) [ 242.821029][T11023] overlayfs: failed to resolve '': -2 07:05:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x400454ca, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:41 executing program 0 (fault-call:9 fault-nth:0): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@uid={'uid', 0x2c}}]}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000000)={{0x1, 0x0, @descriptor="72ba1e00b01bad12"}}) 07:05:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 243.149153][T11044] ntfs: (device loop4): parse_options(): The uid option requires an argument. 07:05:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 07:05:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x400454dc, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) [ 243.231731][T11050] FAULT_INJECTION: forcing a failure. [ 243.231731][T11050] name failslab, interval 1, probability 0, space 0, times 0 [ 243.336462][T11050] CPU: 0 PID: 11050 Comm: syz-executor.0 Not tainted 5.4.0-rc5+ #0 [ 243.344383][T11050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.344398][T11050] Call Trace: [ 243.344414][T11050] dump_stack+0x1d8/0x2f8 [ 243.344430][T11050] should_fail+0x555/0x770 [ 243.366483][T11050] __should_failslab+0x11a/0x160 [ 243.371421][T11050] ? p9_client_prepare_req+0xc1/0x6c0 [ 243.376794][T11050] should_failslab+0x9/0x20 [ 243.381290][T11050] kmem_cache_alloc+0x56/0x2e0 [ 243.381316][T11050] p9_client_prepare_req+0xc1/0x6c0 [ 243.381332][T11050] p9_client_rpc+0xc5/0xf70 [ 243.381348][T11050] ? trace_lock_acquire+0x159/0x1d0 [ 243.400952][T11050] ? v9fs_file_fsync_dotl+0x9a/0xf0 [ 243.406143][T11050] p9_client_fsync+0x6b/0x110 [ 243.410802][T11050] v9fs_file_fsync_dotl+0xcb/0xf0 [ 243.415809][T11050] __x64_sys_fsync+0x1c3/0x200 [ 243.420556][T11050] do_syscall_64+0xf7/0x1c0 [ 243.425052][T11050] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.430919][T11050] RIP: 0033:0x459f49 [ 243.434791][T11050] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 243.454718][T11050] RSP: 002b:00007fef98570c78 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 243.463115][T11050] RAX: ffffffffffffffda RBX: 00007fef98570c90 RCX: 0000000000459f49 [ 243.471064][T11050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 243.479011][T11050] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 07:05:42 executing program 4: symlinkat(0x0, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0) syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x1400000, 0x1, &(0x7f0000000340)=[{&(0x7f0000000280), 0x0, 0x2}], 0x0, &(0x7f0000000480)={[{@norgrplvb='norgrplvb'}, {@quota_quantum={'quota_quantum', 0x3d, 0x1000}}, {@quota_off='quota=off'}], [{@smackfsdef={'smackfsdef', 0x3d, 'sit0\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) [ 243.486957][T11050] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef985716d4 [ 243.494903][T11050] R13: 00000000004c0b5c R14: 00000000004d3640 R15: 0000000000000007 07:05:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x40049409, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:42 executing program 0 (fault-call:9 fault-nth:1): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 243.767240][T11071] gfs2: not a GFS2 filesystem 07:05:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4004ae86, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) 07:05:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:42 executing program 4: symlinkat(0x0, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x5) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0) syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x1400000, 0x1, &(0x7f0000000340)=[{&(0x7f0000000280), 0x0, 0x2}], 0x0, &(0x7f0000000480)={[{@norgrplvb='norgrplvb'}, {@quota_quantum={'quota_quantum', 0x3d, 0x1000}}, {@quota_off='quota=off'}], [{@smackfsdef={'smackfsdef', 0x3d, 'sit0\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) [ 244.062017][T11087] FAULT_INJECTION: forcing a failure. [ 244.062017][T11087] name failslab, interval 1, probability 0, space 0, times 0 07:05:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4004ae8b, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) [ 244.196159][T11094] gfs2: not a GFS2 filesystem [ 244.225892][T11087] CPU: 1 PID: 11087 Comm: syz-executor.0 Not tainted 5.4.0-rc5+ #0 [ 244.233803][T11087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.233808][T11087] Call Trace: [ 244.233824][T11087] dump_stack+0x1d8/0x2f8 [ 244.233841][T11087] should_fail+0x555/0x770 [ 244.233860][T11087] __should_failslab+0x11a/0x160 [ 244.251492][T11087] ? p9_fcall_init+0x9e/0x220 [ 244.251506][T11087] should_failslab+0x9/0x20 [ 244.251516][T11087] kmem_cache_alloc+0x56/0x2e0 [ 244.251528][T11087] ? trace_kmem_cache_alloc+0xcd/0x130 [ 244.280346][T11087] p9_fcall_init+0x9e/0x220 [ 244.284831][T11087] p9_client_prepare_req+0x11b/0x6c0 [ 244.290094][T11087] p9_client_rpc+0xc5/0xf70 [ 244.294589][T11087] ? trace_lock_acquire+0x159/0x1d0 [ 244.299768][T11087] ? v9fs_file_fsync_dotl+0x9a/0xf0 [ 244.304945][T11087] p9_client_fsync+0x6b/0x110 [ 244.309611][T11087] v9fs_file_fsync_dotl+0xcb/0xf0 [ 244.314614][T11087] __x64_sys_fsync+0x1c3/0x200 [ 244.319358][T11087] do_syscall_64+0xf7/0x1c0 [ 244.323837][T11087] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.329712][T11087] RIP: 0033:0x459f49 [ 244.333592][T11087] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 244.353181][T11087] RSP: 002b:00007fef98570c78 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 244.361567][T11087] RAX: ffffffffffffffda RBX: 00007fef98570c90 RCX: 0000000000459f49 [ 244.369601][T11087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 244.377559][T11087] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 244.385865][T11087] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef985716d4 [ 244.393814][T11087] R13: 00000000004c0b5c R14: 00000000004d3640 R15: 0000000000000007 07:05:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4004ae99, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:43 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='illinois\x00', 0x388) prctl$PR_SET_ENDIAN(0x14, 0x3) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) recvfrom$ax25(r1, &(0x7f0000000040)=""/249, 0xfffffcfa, 0x3, &(0x7f0000000140)={{0x3, @default}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) r3 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x1, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f00000003c0)={0x9, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000280)={0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}]}) shutdown(r0, 0x1) 07:05:43 executing program 0 (fault-call:9 fault-nth:2): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 07:05:43 executing program 4: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x20002) r2 = memfd_create(&(0x7f0000000680)='/dev/loop#\x00', 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) geteuid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = getpgid(0x0) sched_setaffinity(r3, 0x31f, &(0x7f0000000500)) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x0) sendfile(r1, r2, 0x0, 0x20000102000007) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) syz_genetlink_get_family_id$team(0x0) r5 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000a00)={"c5c48455550c5f15d6a1e54e8434d392b1ee8ce0d8cc789e6f9f5fff37ea66e3ca2631545d2fac4abc17eb7ac022137c40ce9850330e934af106b6d2b7b23ab19ac6157f94543f7759d7d90386c0a66d13d3e29cd3c6af3aacf0403dfd57a8f8135dc35686b0919abd7055617083c2d27e3b8f482c0f739c8d5b6b8550e111346a569c4ef7974920a0d7d047f3aa354d1ecdd6032a60c603c404884d346b4f5f2a11da56be949d0f7631fc8cfaaad5c4a62696e3e255e89ea6a55cd3d7c072f17a1259489e5c8c35e774bdf939b28c750dbbcabb6f8243e7ddc524c53053d507b8d8841c66088bb387c003a38c6b56c6d3943436d3bfaee3a64f70cf0786eeefcb20c20d6ccab79d6b56c389e2c2036dd5c530cf9375fcdfc5c64ed37d249442e633724fc2a1c05ceb01c61a1ec83aa77af2a86431dbd70b1f57d83b558d5b7f991e59e4de3d94ecfd0d1ee35e28b03fc0c4edf919b649dbe0bee545c8a523de067f6d4c93585430d396a84a8128244e7880b3fb27d3e25bbdae3248a60f3835a8e5c1b8ec9054f0b28c3b8f3bb8805756908d313f77fe38934b57b1626bf795f20ded88ac5593dfd331d6ee199ae59864a789c50a0716705a5066680491ae4865f94eb777f1af9cecf98eba79e57ba4f056fc2faafc2b6b876323a192fad3e9e2328191df6def6cc8a74e7bf7032a69810371780f6035b205461f06194bee219f01225d7770067d4b8368b6e76cad966e9c68b3fa9129196dc06422e56a72c96dd97c436c97fc9c0fafbe9a70db131c4ccc0c16e37b3dd16b47c80c8dbf457f5eeb2a0bd1bd121d55092b7a421af41520af3a14d021ac7a5b687be522b7077604441a420679cc1f7dc60c6a7a9c38d5cc925f45180bf6c3d03296df35e80cee74a9d5112ad31d9f73a929f26ab98b78034136f5c780db45f6685ef241766a1b1e6b1022867fee580f6d4edd7209d80a69d5a9c14f5c8f40d0146fd345c293f8f528fd0f769ba1d3e1afb2d7ecc7642d84f5427bc7eb8d3df8587fdf9c8a1ae6fb8da5f4c7f41dcc4357aa174bc748f2b7b936acf1a571b37051f582e64662547b5b5a300dad70abe401d31ab0ee0f954836e504b2600fac22a7563f765a5e28a9c8e5070f87c7108d2bba9dd471e07f853794ecc5b07ed9613474efee45e3cbf4d1e8731f6f2fc4916eeb5477e38618149221fdcb7fa0b96dc6d93300310ac036e2bca6de88be17d01ef15da72524dc3c3414aeb8035892e6cb9a8a8e0ede1f083fe121e6d968e2c5974db5a86f9087e11c0e07ed02df3cf64be47e80c63925975d2514335b6cd952154bbc1bf2b52adf0c6529d9d05acf16f5b2178395e7df8ad6223d19a38d63d6785ef1fc69100b79a92325e358f75f8213f858e725fc0c1246ad2f0c1cdb3fc933e7ba971de2707689bfe56cc62cb0179b090d83435d3b"}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000180)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x80000) socket(0x0, 0x2, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0xd23e41, 0x0) ioctl$KVM_GET_LAPIC(r6, 0x8400ae8e, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x6287a1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000002d80)={@empty, @local, r8}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000180)) r10 = socket$inet(0x2, 0x3, 0x19) r11 = socket(0x10, 0x803, 0x0) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r12, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r12, 0x400448c9, &(0x7f00000000c0)={{0x2, 0x2d, 0xfb, 0x8, 0x7f, 0x4}, 0x1}) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r10, &(0x7f0000003080)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @rand_addr, @empty}}}, @ip_tos_u8={{0x11}}], 0x38}}], 0x1, 0x0) 07:05:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x40082406, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x80044323, 0x0) 07:05:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) [ 245.397366][T11162] FAULT_INJECTION: forcing a failure. [ 245.397366][T11162] name failslab, interval 1, probability 0, space 0, times 0 07:05:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 245.536368][T11162] CPU: 0 PID: 11162 Comm: syz-executor.0 Not tainted 5.4.0-rc5+ #0 [ 245.544286][T11162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.554330][T11162] Call Trace: [ 245.554370][T11162] dump_stack+0x1d8/0x2f8 [ 245.554387][T11162] should_fail+0x555/0x770 [ 245.554404][T11162] __should_failslab+0x11a/0x160 [ 245.571472][T11162] ? mempool_alloc_slab+0x4d/0x70 [ 245.576494][T11162] should_failslab+0x9/0x20 [ 245.580993][T11162] kmem_cache_alloc+0x56/0x2e0 [ 245.585752][T11162] mempool_alloc_slab+0x4d/0x70 [ 245.590596][T11162] ? mempool_free+0x350/0x350 [ 245.595267][T11162] mempool_alloc+0x104/0x5e0 [ 245.599859][T11162] ? __might_sleep+0x8f/0x100 [ 245.604538][T11162] bio_alloc_bioset+0x1c0/0x5e0 [ 245.609389][T11162] submit_bh_wbc+0x1d5/0x700 [ 245.613981][T11162] __sync_dirty_buffer+0x1a2/0x2d0 [ 245.619089][T11162] sync_dirty_buffer+0x1a/0x20 [ 245.623859][T11162] ext4_write_inode+0x35c/0x590 [ 245.628707][T11162] __writeback_single_inode+0x548/0x620 [ 245.634254][T11162] writeback_single_inode+0x3b7/0x7f0 [ 245.639621][T11162] ? _raw_spin_unlock+0x2c/0x50 [ 245.644470][T11162] sync_inode_metadata+0x7a/0xc0 [ 245.649411][T11162] __generic_file_fsync+0x158/0x1a0 [ 245.654610][T11162] ext4_sync_file+0x2b4/0xb50 [ 245.659287][T11162] __x64_sys_fsync+0x1c3/0x200 [ 245.664050][T11162] do_syscall_64+0xf7/0x1c0 [ 245.668669][T11162] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.674644][T11162] RIP: 0033:0x459f49 [ 245.678540][T11162] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 245.698186][T11162] RSP: 002b:00007fef9854fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 245.706603][T11162] RAX: ffffffffffffffda RBX: 00007fef9854fc90 RCX: 0000000000459f49 [ 245.714575][T11162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 245.722545][T11162] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 07:05:44 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="950000000000000004860400050000003571c0fffcffffff2021070001000000255220000800000018200000", @ANYRES32=r1, @ANYBLOB="00674e03894b532cdbff3246087df111339274", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 07:05:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x800454d2, 0x0) [ 245.730511][T11162] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef985506d4 [ 245.738481][T11162] R13: 00000000004c0b5c R14: 00000000004d3640 R15: 0000000000000007 07:05:44 executing program 0 (fault-call:9 fault-nth:3): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140)=0x8, &(0x7f0000000180)=0x4) bind$inet6(r2, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) getrlimit(0x9, &(0x7f00000001c0)) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'ip6gretap0\x00', 0x200}) 07:05:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) [ 246.125024][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 246.265982][T11195] FAULT_INJECTION: forcing a failure. [ 246.265982][T11195] name failslab, interval 1, probability 0, space 0, times 0 [ 246.273681][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 246.361016][T11195] CPU: 1 PID: 11195 Comm: syz-executor.0 Not tainted 5.4.0-rc5+ #0 [ 246.368944][T11195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.379000][T11195] Call Trace: [ 246.382300][T11195] dump_stack+0x1d8/0x2f8 [ 246.386639][T11195] should_fail+0x555/0x770 [ 246.391059][T11195] __should_failslab+0x11a/0x160 [ 246.396016][T11195] ? p9_fcall_init+0x9e/0x220 [ 246.400718][T11195] should_failslab+0x9/0x20 [ 246.405211][T11195] kmem_cache_alloc+0x56/0x2e0 [ 246.409976][T11195] ? p9_fcall_init+0x9e/0x220 [ 246.414631][T11195] p9_fcall_init+0x9e/0x220 [ 246.419118][T11195] p9_client_prepare_req+0x168/0x6c0 [ 246.424382][T11195] p9_client_rpc+0xc5/0xf70 [ 246.428962][T11195] ? trace_lock_acquire+0x159/0x1d0 [ 246.434154][T11195] ? v9fs_file_fsync_dotl+0x9a/0xf0 [ 246.439347][T11195] p9_client_fsync+0x6b/0x110 [ 246.444008][T11195] v9fs_file_fsync_dotl+0xcb/0xf0 [ 246.449022][T11195] __x64_sys_fsync+0x1c3/0x200 [ 246.453761][T11195] do_syscall_64+0xf7/0x1c0 [ 246.458256][T11195] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 246.464124][T11195] RIP: 0033:0x459f49 [ 246.468010][T11195] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 246.487779][T11195] RSP: 002b:00007fef98570c78 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 246.496199][T11195] RAX: ffffffffffffffda RBX: 00007fef98570c90 RCX: 0000000000459f49 07:05:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae93, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 246.504152][T11195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 246.512099][T11195] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 246.520049][T11195] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef985716d4 [ 246.528005][T11195] R13: 00000000004c0b5c R14: 00000000004d3640 R15: 0000000000000007 07:05:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) close(0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x190, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc88a8ffff000c000400040082c10400ea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) [ 246.677965][T11211] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 246.702023][T11212] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:05:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x80086301, 0x0) 07:05:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae9c, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:45 executing program 0 (fault-call:9 fault-nth:4): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x40189206, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 07:05:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 247.461896][T11241] FAULT_INJECTION: forcing a failure. [ 247.461896][T11241] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 247.475126][T11241] CPU: 0 PID: 11241 Comm: syz-executor.0 Not tainted 5.4.0-rc5+ #0 [ 247.483016][T11241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.493079][T11241] Call Trace: [ 247.496381][T11241] dump_stack+0x1d8/0x2f8 [ 247.500723][T11241] should_fail+0x555/0x770 [ 247.505144][T11241] should_fail_alloc_page+0x55/0x60 [ 247.510329][T11241] prepare_alloc_pages+0x283/0x460 [ 247.515440][T11241] __alloc_pages_nodemask+0xb2/0x5d0 [ 247.520713][T11241] ? mark_lock+0x107/0x1650 [ 247.525199][T11241] kmem_getpages+0x4d/0xa00 [ 247.529682][T11241] cache_grow_begin+0x7e/0x2c0 [ 247.534423][T11241] cache_alloc_refill+0x311/0x3f0 [ 247.539423][T11241] ? check_preemption_disabled+0xb7/0x2a0 [ 247.545123][T11241] kmem_cache_alloc+0x2b9/0x2e0 [ 247.549950][T11241] ? p9_fcall_init+0x9e/0x220 [ 247.554604][T11241] p9_fcall_init+0x9e/0x220 [ 247.559086][T11241] p9_client_prepare_req+0x168/0x6c0 [ 247.564357][T11241] p9_client_rpc+0xc5/0xf70 [ 247.568843][T11241] ? trace_lock_acquire+0x159/0x1d0 [ 247.574019][T11241] ? v9fs_file_fsync_dotl+0x9a/0xf0 [ 247.579210][T11241] p9_client_fsync+0x6b/0x110 [ 247.583863][T11241] v9fs_file_fsync_dotl+0xcb/0xf0 [ 247.588868][T11241] __x64_sys_fsync+0x1c3/0x200 [ 247.593623][T11241] do_syscall_64+0xf7/0x1c0 [ 247.598104][T11241] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.603972][T11241] RIP: 0033:0x459f49 [ 247.607842][T11241] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 247.627428][T11241] RSP: 002b:00007fef98570c78 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 247.635824][T11241] RAX: ffffffffffffffda RBX: 00007fef98570c90 RCX: 0000000000459f49 [ 247.643776][T11241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 247.651731][T11241] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 07:05:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4020940d, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) [ 247.659679][T11241] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef985716d4 [ 247.667626][T11241] R13: 00000000004c0b5c R14: 00000000004d3640 R15: 0000000000000007 07:05:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 07:05:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:46 executing program 0 (fault-call:9 fault-nth:5): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:46 executing program 4: add_key$keyring(&(0x7f00000008c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, 0x0) request_key(&(0x7f0000000980)='dns_resolver\x00', &(0x7f0000000840)={'\x00\x97\xdf', 0x3}, &(0x7f0000000880)='./cgroup.net/syz1\x00', 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000300)='\xff\x03\x00\x00\x11\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) r4 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\b', 0x29a, 0xfffffffffffffffb) r5 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\b', 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, r5, 0x0) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r5) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r7 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x3, 0x0, 0x101, 0x1, {0x4, 0x0, 0x80000000, 0x3}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000940)='?dev/a5\xc8\xb3x\xac\xeb\v#R\xb8\x9a\xa2', 0x200000, 0x261801) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700140001008e0000c08100e914a300fe33"], 0x12) pwritev(r7, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) r10 = request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000240)='kfyring&-\x00', 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, r10) keyctl$get_persistent(0x16, r9, r10) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, 0xffffffffffffffff) sendfile(r6, r6, 0x0, 0x40fdf) 07:05:46 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = open(0x0, 0x0, 0x0) close(r3) io_cancel(0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x81, 0x13d, 0x1, 'queue1\x00', 0x1}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RSTATFS(r5, &(0x7f0000000200)={0x43, 0x9, 0x2, {0x0, 0x7fffffff, 0xc1da, 0x0, 0x0, 0x1, 0xffffffff7fffffff}}, 0x43) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000180), 0x10}}, 0x0) [ 248.075250][T11269] FAULT_INJECTION: forcing a failure. [ 248.075250][T11269] name failslab, interval 1, probability 0, space 0, times 0 [ 248.088106][T11269] CPU: 1 PID: 11269 Comm: syz-executor.0 Not tainted 5.4.0-rc5+ #0 [ 248.095999][T11269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.106055][T11269] Call Trace: [ 248.106085][T11269] dump_stack+0x1d8/0x2f8 [ 248.106101][T11269] should_fail+0x555/0x770 [ 248.106117][T11269] __should_failslab+0x11a/0x160 [ 248.106131][T11269] ? radix_tree_node_alloc+0x1a1/0x370 [ 248.128599][T11269] should_failslab+0x9/0x20 [ 248.133087][T11269] kmem_cache_alloc+0x56/0x2e0 [ 248.137847][T11269] radix_tree_node_alloc+0x1a1/0x370 [ 248.143114][T11269] idr_get_free+0x2b8/0x890 [ 248.147613][T11269] idr_alloc+0x14a/0x290 [ 248.151840][T11269] p9_client_prepare_req+0x3af/0x6c0 [ 248.157190][T11269] p9_client_rpc+0xc5/0xf70 [ 248.161674][T11269] ? trace_lock_acquire+0x159/0x1d0 [ 248.166851][T11269] ? v9fs_file_fsync_dotl+0x9a/0xf0 [ 248.172032][T11269] p9_client_fsync+0x6b/0x110 [ 248.176697][T11269] v9fs_file_fsync_dotl+0xcb/0xf0 [ 248.181700][T11269] __x64_sys_fsync+0x1c3/0x200 [ 248.187137][T11269] do_syscall_64+0xf7/0x1c0 [ 248.191618][T11269] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 248.197485][T11269] RIP: 0033:0x459f49 [ 248.201360][T11269] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 07:05:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 07:05:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 248.220952][T11269] RSP: 002b:00007fef98570c78 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 248.229339][T11269] RAX: ffffffffffffffda RBX: 00007fef98570c90 RCX: 0000000000459f49 [ 248.237285][T11269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 248.245244][T11269] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 248.253193][T11269] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef985716d4 [ 248.261237][T11269] R13: 00000000004c0b5c R14: 00000000004d3640 R15: 0000000000000007 07:05:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x40305828, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:47 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x10, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001840)={r0, &(0x7f0000000740)="d3986014422ce523fa217480ee24ce961f90b961bcc6e8117e00e6b419f8826e3436179f240d9cfc040e683e1fbdb81776c19db6982ecd40a5f4320fec5ca3052b5980c84a48977933785474b08ea771a6f20be0e0e0c5be44617448653577c5f9187e66145f6278f5bd77d63ddafba98c3f1f42b4a4cc20509c776e335529473d77ce0e1e82ff169c648a466cb28f39902ce4a5f451262141557b3b8240a1f786e6993ac0d6ee9744bfb16119f52f6fd35c5af8a642dfca87330d30dfb21e7311b935d3ee0780394a828b3ab852724995b6e639130e3d4c9039c6d479db6239f7a25bc20972", &(0x7f0000000840)=""/4096, 0x4}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)={&(0x7f0000000140)='./file0\x00', r0}, 0x10) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x7, &(0x7f0000000600)=[{&(0x7f0000000180)="e4ab293579c8758f512430d2744d9d4d2ff2c0575d6c1f97dc5ed2af853d0257d711a49eb747a8553f2a6a1cc61a19af612dcfacf4c0746f703424d62ff91280421eff6bed6c40a0684e1e676b235e28fe6c996024ed1f64cf179efe029e7c4d90", 0x61, 0x9}, {&(0x7f0000000300)="3fa46cdcf616ac928e2dc701a3eca0fa96e97918ffdd83a2c2ac19a02be34ced3bef8d11b3523b204d931220911e2310c83a71c64f56796f1f7980398505f02b6f03ce01ce5d7e78f5fd2a6555395411979724c62831bb74c832b695e51e1e3586736ae26f576fdf2e275e1fbbdf98b470e705b006dede71ad3bc6b8cbe4de98b703467d443e1546de662c9d5312de65d33ddd5b364d60a390efff6b3b689f713a6cf2cc2ffbac807f78d550607ab4fcacddf78d413329ace51146cdcdd9260c652667c54eb5f9355b946e447215f781dca2", 0xd2, 0xffffffff}, {&(0x7f0000000080)="08f01f78b4a3c7594b4f2abc61bdcf24", 0x10, 0x7}, {&(0x7f0000000400)="384b60d011a86eb926475a75a44aa9c2bb43b2fa59c9ce9496042479b9c0520d1b9d2cbfdcc8603b7f4a8035b94cba277e33c4469caf3441de67e3563ef31d7afb0598bc768b62513d862735d1da35de708840899db29b3631c41bc3cb3d09370ddbc6bbfffc559b3c64655a4c6a5e95743239aea01bf5ed3d1eb7cd75eb8fefe48815f98a2e2d6841cad2eeede76b726eaa25a6a6edfee90c1d5485bd6eedb06676dd097d1dc3795a9fea0efccd69e914fcdd6626e04a992004554fccd3f22b913fd67457bba5a475c43941da6f383bd17a1a4481b19e61e395ca1abba4dfa1b7523634c7fcec8e14b2f1e7", 0xec, 0x11}, {&(0x7f0000000500)="4c9f43a0230d64e44a65d69025ec4e8ba00de7049de7acf7305316bfac99fe1d419b2e1183b47a0d81a87c724080b45230da73334e4bcdcff9eabc29e1b7466e3ef530e8730bf4a42a80defdad2dd7c7dece33adccd323f7a6413be26628f7e475f7fcb16273469aa1f2d4dd7227bdd72e4a1fe113a74c960be2761304f1734e8e2a1d9cdf510655e254d8ad730fbc5063c70e8e690104bab0db1d0098da511ad8c13f89d3e8f5ffb621dd38be019e16c6667f22912344b02c72bcb234d45b81731b", 0xc2, 0x7ff}, {&(0x7f0000000200)="af3c2d98dbef12002e0522748553475d0d0096455385e304c430a3d2f54a573eecd759f9b52fec641aae79a8b273a7261ffb904b7ba663182c68c5cf4daf1ad1633fce52c4523b9fafdc8cacd61fb758a2bf2098cf0b18e33765179ba8a40e4aa400dfc3aa0352e2fbde5cda8672a81042c1f67aeaaec549b8a563434eab9b4b2e2fda2bceefb40639d89283a848", 0x8e, 0xff}, {&(0x7f0000000100)="85aef251e434b352dd927a8743373a9f532e1e430cd818914364ad17906d8086a6c2e124068c610de918fd1340c4ce3bafcaaa681c140a5210", 0x39, 0x7ff}], 0x0, &(0x7f0000001880)={[{@gquota='gquota'}, {@rtdev={'rtdev', 0x3d, './file0'}}, {@noattr2='noattr2'}], [{@appraise='appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x4}}, {@permit_directio='permit_directio'}, {@obj_role={'obj_role', 0x3d, ')'}}]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x5) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000006c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x7, [@null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 07:05:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) [ 248.583722][T11291] XFS (loop4): unknown mount option [appraise]. 07:05:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4040ae9e, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:47 executing program 0 (fault-call:9 fault-nth:6): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 248.670620][T11297] XFS (loop4): unknown mount option [appraise]. 07:05:47 executing program 4: ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x0, 0x1, 0x3, 0x1}) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000080)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='vcan0\x00'}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000180)) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f00000001c0)={0x2, 0x1d23}) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r3 = syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x0, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f00000002c0), &(0x7f0000000300)=0x40) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @raw_data=[0x8, 0x5, 0x80, 0x7, 0x3, 0x1, 0xffffc4f7, 0xfffffeff, 0x1, 0x1, 0x5, 0x6, 0x3f, 0x4, 0x10001, 0x7, 0x2, 0x7, 0x200, 0x401, 0x37, 0x2, 0x8, 0x7, 0x69d, 0xe20, 0x3f, 0x8, 0x40, 0x8, 0x1ff, 0x1]}) r4 = dup(r3) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000400)) getresuid(&(0x7f0000000a00)=0x0, &(0x7f0000000a40), &(0x7f0000000a80)) r6 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0}, &(0x7f0000000b00)=0xc) syz_mount_image$xfs(&(0x7f0000000440)='xfs\x00', &(0x7f0000000480)='./file0\x00', 0xe, 0x6, &(0x7f0000000940)=[{&(0x7f00000004c0)="a0d0b31b53010c816ab83c61f714d44e7877b9026c308d220746c2e29d1778804d8ebfbfeba98b95aec18a61e8770bbae2751291bce609a8c5526ee0b866960a72c525a0cbc0a49566971797e33ea0d291d49da2a817fc2d60ffd24915d556acf17231045a95a311f7a9a3a9", 0x6c, 0xfffffffffffff801}, {&(0x7f0000000540)="7326eb726c86ae0db8c5e0586cb880a0adcd1ec44b7d98aed507973a779b225c20919ffed021d3013f0c729d3f22423254a29795ede185ae0f7695313d5cbcb481d8e90f5689537b4ac8373a82ebd179682e9103b39c7c17bb0d4dad394b65959880b6a0be79017b316ef9c38082b16fae908fc61f729a00be81b14a080d2ae1d357c03f34dd4ebe19b3f84f7b41ee44fe886562e5cf320c441db4fa845f146160172c216042f5f90e67da001bd588e4abc4111c5909a6", 0xb7, 0x4}, {&(0x7f0000000600)="c806fe356c5f99ea9721bb733136b2543a49dab9874ad4524e4b9e2fa5bb329d3effcd4bd5ab230c36ab644c21f9925c3233c9de5ebcc9a9cba4cd572520b486ff260ab1ae1c17055b5d10d6c9f63886d29922e72f8131276f8046bc6ea3f92f0529d3a474287322071b764ef1ad332ddaa4d10bff94e1fc23574cb5ab2639790f8420f002e04e658d6b45a0b30a95767540af46e24df2dd285b5cc7f70b131602126d4158da676bfb33a1f9a6248745eef21ec80b6e2ca89a01a0701282fd4344b97b71", 0xc4, 0x6}, {&(0x7f0000000700)="6cf2ce88d1f0eb755068522ede734d971b72be466777f41ccd33358f2cfac14aea5ad93e401845d121aad774b10fafdeaf14fd7be67b68fa76791401bb4aec7eb429e5e45dffd59be729c441eb79fc9b6937b297458d073955c1ee1853830eb73f0058d6859f4b813803110d1a200bfaddc4dafcfe8dbf55d025209e66c043241be5e5dfa02f8bbbb87339", 0x8b, 0xa8a}, {&(0x7f00000007c0)="6ddb42e8399e61ea8e058ab8819443c4efaabe393b8cbf5761a8ee07228e4fdc44d7d2310ad2ddf6d17a033d27dd2b930eb3961899a68aab19ba5e7aac0eb77c2ee9679bb94fd4a0ebe0213d1f63c493b6afdf8b06a457ff1ad03b39331dc0aaa20e83bec7dc8fffa9d90e130e52a43f75985c1207a6ec7093912e219d2f2b448672c45f5fbedc8259bd15ce56f4a917e0df22aed0e6d10b43b5cf98979324a4d6b1c687c26951762c401ed87395802c5629f8893c99879bbb086e30fe31f20f3fd32d5c275ea190aa93af93b8b2f4858a8b8f9fb7a6bd4a60c82c6c3a84b8eae7ff62ad59645402132f73d5dddfaf84e3398367", 0xf4, 0x5}, {&(0x7f00000008c0)="33afeca9a8a62dc028170d24152137db4a29ff30c23d4795c9320ef0b0352d352f73b33181c4bdf593e55f98f602c6f40f01b5eb810f0eb631eed47ba99b9fd1295edc632bba18654435b1abe6092a912871e495891651d0", 0x58, 0x9}], 0x2024004, &(0x7f0000000b40)={[{@gquota='gquota'}, {@logdev={'logdev', 0x3d, './file0'}}, {@mtpt='mtpt'}, {@logdev={'logdev', 0x3d, './file0'}}, {@uqnoenforce='uqnoenforce'}, {@noquota='noquota'}, {@norecovery='norecovery'}, {@filestreams='filestreams'}], [{@fowner_gt={'fowner>', r5}}, {@subj_user={'subj_user', 0x3d, '/dev/cec#\x00'}}, {@smackfstransmute={'smackfstransmute'}}, {@euid_eq={'euid', 0x3d, r6}}, {@fowner_lt={'fowner<', r7}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_role={'obj_role', 0x3d, '}em0'}}, {@measure='measure'}, {@obj_type={'obj_type', 0x3d, '/dev/snd/pcmC#D#c\x00'}}]}) fsetxattr(r4, &(0x7f0000000c80)=@random={'btrfs.', 'xfs\x00'}, &(0x7f0000000cc0)='^ppp0vboxnet0\x00', 0xe, 0x2) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/capi/capi20\x00', 0x8000, 0x0) write$P9_RREADDIR(r8, &(0x7f0000000d40)={0x103, 0x29, 0x1, {0x0, [{{0x0, 0x2}, 0x1, 0x1, 0x7, './file0'}, {{0xe0, 0x1, 0x3}, 0x8001, 0x1f, 0x7, './file0'}, {{0x99, 0x2, 0x6}, 0x4, 0x1, 0x7, './file0'}, {{0x2e, 0x1, 0x5}, 0x986, 0x4, 0x7, './file0'}, {{0x2, 0x2, 0x8}, 0x9, 0xf9, 0x7, './file0'}, {{0x1, 0x3, 0x6}, 0x5, 0x5, 0x7, './file0'}, {{0xf0, 0x2, 0x4}, 0x6b25, 0x8, 0x7, './file0'}, {{0x80, 0x0, 0x5}, 0x9, 0x8f, 0x7, './file0'}]}}, 0x103) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000e80)='cpuacct.stat\x00', 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r9, 0x89ea, &(0x7f0000000ec0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x42010, r4, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000f00)={'mangle\x00', 0x6c, "47dd34bc1649fa226c17252d0b337edb5dd256a6a240690ea8ee796ad3eefb1899f7a7b8529e275294f8d1d93a49ff839293fb9196f2cd9fe3d4b0640a50c663c5c4856dc6255982ec5d6dc512b8828fd5be0468ba4bae5d8ea1e63e52fcbda70448de1818ef3a9d05ea8739"}, &(0x7f0000000fc0)=0x90) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000001000)='/dev/full\x00', 0x420000, 0x0) ioctl$TUNGETVNETHDRSZ(r10, 0x800454d7, &(0x7f0000001040)) ioctl$TIOCNXCL(r9, 0x540d) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc00c642d, &(0x7f0000001080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000010c0)={0x74, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_AGP_BIND(r11, 0x40106436, &(0x7f0000001100)={r12, 0x6}) 07:05:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4040aea0, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 07:05:47 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) 07:05:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000000c0)=0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000300)=0xc) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x800, 0x0) syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0x7f, 0x400) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800], 0x0, 0x0, &(0x7f0000001700)=ANY=[]}, 0x78) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000200)) listen(r1, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x5) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f00000000c0)=0x5) syz_emit_ethernet(0x4, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRESHEX=0x0, @ANYPTR64, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYBLOB="76a578f83d000400006762d3706c5b3f8bf8dab85f5321b4526397dfe9b741ab75b57f7d00e741ae797ac7dc5ea5b5402436c2a7455be8492c19d4ad78514b817729dd575049b828ad3d6e3a4b483c4ab1e530b78a3e0ede7c029c3ca181d1354da119b68e61154feca1c5a806b2318e0c426c84bbfb303d0022ead6a90a5615ee5a240c8e7d240fc022fbfec09a90565ef5270675ba4ef0bb5b3880a1fae978888cc8559226f73d3b6e11f825bab990eeb7e37e431436ed74e13a6ca6ea751bbd6ede7b7d99813f4617aad9e66f381dc03a2fbd117bac2a", @ANYRESDEC=r3, @ANYRES32=r4, @ANYRES64=r5, @ANYRESOCT=r6, @ANYBLOB="e54f8c0c508ead4f515caaf47d53c49662d94e7610926f5c71f6d0b9229b9d3efe9e7b95b5ca6a3271956a44dbdd5a9a9820ef25ffd17a2a5ad7e9ce6c4be84062ed8b7d7adb442219b30253e1f9eeb2617c074a3684f474ad5c9cc5fc9592bc13ef42aead25308544a60fdb7817e7bec560acd6d26e55e6e5a1a2d6a1411a2c227f0e5ba519bce1af816fd15be93d8896e53244c299be0d6b5def1a10fd7dc1798d19367c0504e44e17f26d166c3b678a3b5c3f85c7889d1b6214039e3c"]], 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000004c0)='./file0\x00', 0x0) request_key(&(0x7f0000000180)='\xcc\x18\xf4%h\xc7t\xd2', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f00000002c0)='p\xf0p1s3\xd6Qe\xf1\x03\xb7\xd0\x00', 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 07:05:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4048ae9b, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xc008ae88, 0x0) 07:05:48 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c793fb54aff8eaff4f6b59c41705b96a6711d4679079d000000000000000000000000000000000063872aeaa93fa51981ac2830f3a9725a14228523a13169357ad3c5bc213713b90418b4e86a6f1406bcde039387783f2b48a4be56bf72c14ab2d945d24437a0dc2c582e14a972af5750bba6bab71f9e7f203aa6800fd28b8f15e61ade5748ecc808a308236692c66d65ff5e92a40a7f00c94683664c89f4e09cc4ab3d95c6"], 0x15) r2 = dup(r1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) r4 = accept(r3, &(0x7f0000000180)=@nl, &(0x7f00000003c0)=0x80) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000400)) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x3}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1040008, &(0x7f0000000340)={'trans\x1cfd,', {'\x16o\x00\x13\x00', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport='privport'}]}}) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f00000000c0)=0x5) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f00000000c0)=0x5) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f00000004c0)={0x1fffe, &(0x7f0000000480)=[r7]}, 0x1) fsync(r5) 07:05:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x404c534a, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:48 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x1010, r4, 0xffffd000) 07:05:48 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, ']cpuset'}}]}}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r4) 07:05:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x406855c9, &(0x7f00000000c0)={0x1, 0x2, [{0x176}]}) 07:05:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 07:05:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:48 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7}, 0x7) fsync(r3) [ 249.934730][T11382] kasan: CONFIG_KASAN_INLINE enabled [ 249.940413][T11382] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 249.985644][T11382] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 249.992608][T11382] CPU: 0 PID: 11382 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 250.000509][T11382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.010569][T11382] RIP: 0010:kvm_coalesced_mmio_init+0x59/0xf0 [ 250.016620][T11382] Code: 00 00 00 fc ff df e8 76 6c 6b 00 48 c1 e3 06 49 be 00 00 00 00 80 08 05 00 49 01 de 49 8d bf d8 96 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 cb ac a4 00 4d 89 b7 d8 96 00 00 49 8d bf [ 250.036214][T11382] RSP: 0018:ffff888054b77d10 EFLAGS: 00010206 [ 250.042429][T11382] RAX: 00000000000012db RBX: fffa800099ab0000 RCX: 0000000000040000 [ 250.050379][T11382] RDX: ffffc900109be000 RSI: 0000000000002726 RDI: 00000000000096d8 [ 250.058333][T11382] RBP: ffff888054b77d30 R08: ffffffff834857da R09: ffffed1015d46b05 [ 250.066277][T11382] R10: ffffed1015d46b05 R11: 0000000000000000 R12: dffffc0000000000 [ 250.074226][T11382] R13: 0000000000000000 R14: ffff888099ab0000 R15: 0000000000000000 [ 250.082176][T11382] FS: 00007f8833601700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 250.091076][T11382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.097633][T11382] CR2: 00007f66ee636000 CR3: 00000000a09d1000 CR4: 00000000001426f0 [ 250.105589][T11382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 250.113536][T11382] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 250.121652][T11382] Call Trace: [ 250.124938][T11382] kvm_dev_ioctl+0x18fa/0x1fd0 [ 250.129699][T11382] ? kvm_reboot+0x40/0x40 [ 250.134018][T11382] do_vfs_ioctl+0x744/0x1730 [ 250.138606][T11382] ? __fget+0x4c1/0x510 [ 250.142752][T11382] ? tomoyo_file_ioctl+0x23/0x30 [ 250.147663][T11382] ? security_file_ioctl+0xa1/0xd0 [ 250.152750][T11382] __x64_sys_ioctl+0xe3/0x120 [ 250.157404][T11382] do_syscall_64+0xf7/0x1c0 [ 250.161882][T11382] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.167753][T11382] RIP: 0033:0x459f49 [ 250.171621][T11382] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.191202][T11382] RSP: 002b:00007f8833600c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.199611][T11382] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f49 [ 250.207557][T11382] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 250.215503][T11382] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 250.223447][T11382] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f88336016d4 [ 250.231393][T11382] R13: 00000000004c30a8 R14: 00000000004d7018 R15: 00000000ffffffff [ 250.239341][T11382] Modules linked in: [ 250.253243][T11393] kobject: 'kvm' (0000000013f2ab25): kobject_uevent_env [ 250.263585][T11375] kobject: 'kvm' (0000000013f2ab25): kobject_uevent_env [ 250.273555][T11375] kobject: 'kvm' (0000000013f2ab25): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 250.284187][T11393] kobject: 'kvm' (0000000013f2ab25): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 250.298724][T11396] kobject: 'kvm' (0000000013f2ab25): kobject_uevent_env [ 250.303471][T11394] kobject: '9p-61' (00000000bda172bc): kobject_add_internal: parent: 'bdi', set: 'devices' [ 250.306817][T11396] kobject: 'kvm' (0000000013f2ab25): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 250.329781][T11374] kobject: 'kvm' (0000000013f2ab25): kobject_uevent_env [ 250.333249][T11390] kobject: 'kvm' (0000000013f2ab25): kobject_uevent_env [ 250.342160][T11374] kobject: 'kvm' (0000000013f2ab25): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 250.354065][T11390] kobject: 'kvm' (0000000013f2ab25): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 250.354107][T11382] ---[ end trace 65e00506e1c378c3 ]--- [ 250.371882][T11382] RIP: 0010:kvm_coalesced_mmio_init+0x59/0xf0 [ 250.374359][T11394] kobject: '9p-61' (00000000bda172bc): kobject_uevent_env [ 250.385317][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 250.391073][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 250.395534][T11382] Code: 00 00 00 fc ff df e8 76 6c 6b 00 48 c1 e3 06 49 be 00 00 00 00 80 08 05 00 49 01 de 49 8d bf d8 96 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 cb ac a4 00 4d 89 b7 d8 96 00 00 49 8d bf [ 250.417864][T11374] kobject: 'kvm' (0000000013f2ab25): kobject_uevent_env [ 250.424888][T11374] kobject: 'kvm' (0000000013f2ab25): fill_kobj_path: path = '/devices/virtual/misc/kvm' 07:05:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 250.441883][T11394] kobject: '9p-61' (00000000bda172bc): fill_kobj_path: path = '/devices/virtual/bdi/9p-61' [ 250.458270][ T3903] kobject: 'loop1' (0000000092c91403): kobject_uevent_env [ 250.472126][ T3903] kobject: 'loop1' (0000000092c91403): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 250.484418][T11400] kobject: 'kvm' (0000000013f2ab25): kobject_uevent_env 07:05:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 250.484687][T11382] RSP: 0018:ffff888054b77d10 EFLAGS: 00010206 [ 250.499010][T11394] kobject: '9p-61' (00000000bda172bc): kobject_uevent_env [ 250.508714][T11400] kobject: 'kvm' (0000000013f2ab25): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 250.514073][ T3903] kobject: 'loop4' (0000000069c35417): kobject_uevent_env [ 250.526987][T11382] RAX: 00000000000012db RBX: fffa800099ab0000 RCX: 0000000000040000 [ 250.533860][T11394] kobject: '9p-61' (00000000bda172bc): fill_kobj_path: path = '/devices/virtual/bdi/9p-61' [ 250.537119][T11403] kobject: 'kvm' (0000000013f2ab25): kobject_uevent_env [ 250.561993][T11382] RDX: ffffc900109be000 RSI: 0000000000002726 RDI: 00000000000096d8 [ 250.563910][T11399] kobject: 'kvm' (0000000013f2ab25): kobject_uevent_env [ 250.570704][ T3903] kobject: 'loop4' (0000000069c35417): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 250.586934][T11387] kobject: 'kvm' (0000000013f2ab25): kobject_uevent_env [ 250.587811][T11382] RBP: ffff888054b77d30 R08: ffffffff834857da R09: ffffed1015d46b05 [ 250.602312][T11387] kobject: 'kvm' (0000000013f2ab25): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 250.608884][T11403] kobject: 'kvm' (0000000013f2ab25): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 250.621925][T11399] kobject: 'kvm' (0000000013f2ab25): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 250.627742][T11382] R10: ffffed1015d46b05 R11: 0000000000000000 R12: dffffc0000000000 [ 250.652596][T11382] R13: 0000000000000000 R14: ffff888099ab0000 R15: 0000000000000000 [ 250.659234][T11394] kobject: '9p-61' (00000000bda172bc): kobject_cleanup, parent 00000000beeb98e7 [ 250.677748][T11388] kobject: 'kvm' (0000000013f2ab25): kobject_uevent_env [ 250.681143][T11382] FS: 00007f8833601700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 250.695736][T11401] kobject: 'kvm' (0000000013f2ab25): kobject_uevent_env 07:05:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b9050a00000f323e66650f22c10f219666b80500000066b935a847370f01d9b85a008ed8b815018ed0da6dc766b8bf0000000f23d80f21f86635000000400f23f83e0f0866b8010000000f01d9"}], 0x1, 0x0, 0x0, 0x2df) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 250.700591][T11388] kobject: 'kvm' (0000000013f2ab25): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 250.702902][T11401] kobject: 'kvm' (0000000013f2ab25): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 250.723451][T11382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.730464][T11382] CR2: 00007f34ea5eb000 CR3: 00000000a09d1000 CR4: 00000000001426e0 [ 250.737304][T11394] kobject: '9p-61' (00000000bda172bc): calling ktype release 07:05:49 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x102}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0xf58f5d4dc2d471f8, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'bcsf0\x00', {0x2, 0x4e24, @empty}}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000001c0)=0x16, 0x4) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) dup3(r0, r2, 0x0) [ 250.739500][T11382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 250.755533][ T3903] kobject: 'loop1' (0000000092c91403): kobject_uevent_env [ 250.762677][ T3903] kobject: 'loop1' (0000000092c91403): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 250.764173][T11412] kobject: 'kvm' (0000000013f2ab25): kobject_uevent_env [ 250.789837][T11394] kobject: '9p-61': free name [ 250.793056][T11382] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 250.815196][ T3903] kobject: 'loop4' (0000000069c35417): kobject_uevent_env [ 250.822306][T11412] kobject: 'kvm' (0000000013f2ab25): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 250.825326][T11382] Kernel panic - not syncing: Fatal exception [ 250.839429][T11382] Kernel Offset: disabled [ 250.843753][T11382] Rebooting in 86400 seconds..