[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   36.777467][   T25] audit: type=1800 audit(1570445392.254:25): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0
[   36.805228][   T25] audit: type=1800 audit(1570445392.254:26): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0
[   36.832574][   T25] audit: type=1800 audit(1570445392.254:27): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.122' (ECDSA) to the list of known hosts.
2019/10/07 10:50:03 fuzzer started
2019/10/07 10:50:04 dialing manager at 10.128.0.105:39369
2019/10/07 10:50:04 syscalls: 2523
2019/10/07 10:50:04 code coverage: enabled
2019/10/07 10:50:04 comparison tracing: enabled
2019/10/07 10:50:04 extra coverage: extra coverage is not supported by the kernel
2019/10/07 10:50:04 setuid sandbox: enabled
2019/10/07 10:50:04 namespace sandbox: enabled
2019/10/07 10:50:04 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/07 10:50:04 fault injection: enabled
2019/10/07 10:50:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/07 10:50:04 net packet injection: enabled
2019/10/07 10:50:04 net device setup: enabled
2019/10/07 10:50:04 concurrency sanitizer: enabled
10:50:08 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl(r0, 0x4000000002283, &(0x7f0000000100)="34b9")

syzkaller login: [   53.178567][ T7335] IPVS: ftp: loaded support on port[0] = 21
10:50:08 executing program 1:
set_mempolicy(0x0, &(0x7f0000000040), 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071185400000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912461917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646cb77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000640)={0x16, 0x7, 0x0, {{0x9, 'subj_user'}}}, 0x16)
socket$inet6_sctp(0xa, 0x5, 0x84)

[   53.259844][ T7335] chnl_net:caif_netlink_parms(): no params data found
[   53.298092][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.309475][ T7335] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.318199][ T7335] device bridge_slave_0 entered promiscuous mode
[   53.334302][ T7335] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.352874][ T7335] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.362074][ T7335] device bridge_slave_1 entered promiscuous mode
[   53.383966][ T7335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.395855][ T7335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.420382][ T7335] team0: Port device team_slave_0 added
[   53.427233][ T7335] team0: Port device team_slave_1 added
[   53.502387][ T7335] device hsr_slave_0 entered promiscuous mode
10:50:09 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

[   53.579800][ T7335] device hsr_slave_1 entered promiscuous mode
[   53.647882][ T7338] IPVS: ftp: loaded support on port[0] = 21
[   53.656878][ T7335] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.663988][ T7335] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.671366][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.678420][ T7335] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.829239][ T7335] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.857744][ T7335] 8021q: adding VLAN 0 to HW filter on device team0
[   53.865554][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.874932][ T3022] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.898468][ T3022] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.912083][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
10:50:09 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0)
remap_file_pages(&(0x7f000012a000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3)

[   53.948784][ T7340] IPVS: ftp: loaded support on port[0] = 21
[   53.968095][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.976980][ T3022] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.984064][ T3022] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.009931][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.018312][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.025385][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.092567][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.102970][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.122327][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.140595][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.181059][ T7335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.211381][ T7335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.230708][ T7338] chnl_net:caif_netlink_parms(): no params data found
[   54.251472][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.303870][ T7335] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.360303][ T7338] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.367683][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.376164][ T7338] device bridge_slave_0 entered promiscuous mode
10:50:09 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0xc0010058}]})

[   54.404812][ T7338] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.405589][ T7345] IPVS: ftp: loaded support on port[0] = 21
[   54.412129][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.426222][ T7338] device bridge_slave_1 entered promiscuous mode
[   54.546440][ T7340] chnl_net:caif_netlink_parms(): no params data found
[   54.585772][ T7338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
10:50:10 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl(r0, 0x4000000002283, &(0x7f0000000100)="34b9")

[   54.624503][ T7338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.748081][ T7338] team0: Port device team_slave_0 added
10:50:10 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl(r0, 0x4000000002283, &(0x7f0000000100)="34b9")

[   54.809984][ T7338] team0: Port device team_slave_1 added
[   54.836021][ T7340] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.878512][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.900412][ T7340] device bridge_slave_0 entered promiscuous mode
10:50:10 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl(r0, 0x4000000002283, &(0x7f0000000100)="34b9")

[   54.964664][ T7338] device hsr_slave_0 entered promiscuous mode
[   55.029830][ T7338] device hsr_slave_1 entered promiscuous mode
[   55.061510][ T7338] debugfs: Directory 'hsr0' with parent '/' already present!
[   55.069299][ T7340] bridge0: port 2(bridge_slave_1) entered blocking state
10:50:10 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl(r0, 0x4000000002283, &(0x7f0000000100)="34b9")

[   55.076488][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.090908][ T7340] device bridge_slave_1 entered promiscuous mode
[   55.115795][ T7338] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.118089][ T7362] IPVS: ftp: loaded support on port[0] = 21
10:50:10 executing program 0:
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0xffffffff})

[   55.122906][ T7338] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.123000][ T7338] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.143096][ T7338] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.258560][ T7345] chnl_net:caif_netlink_parms(): no params data found
[   55.289022][ T7340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
10:50:10 executing program 0:
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0xffffffff})

[   55.323108][ T7340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.357582][ T7340] team0: Port device team_slave_0 added
[   55.363857][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
10:50:10 executing program 0:
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0xffffffff})

[   55.416980][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.478663][ T7340] team0: Port device team_slave_1 added
10:50:11 executing program 0:
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0xffffffff})

[   55.538035][ T7345] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.548352][ T7345] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.578045][ T7345] device bridge_slave_0 entered promiscuous mode
[   55.622898][ T7375] IPVS: ftp: loaded support on port[0] = 21
[   55.635978][ T7338] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.721661][ T7340] device hsr_slave_0 entered promiscuous mode
[   55.769776][ T7340] device hsr_slave_1 entered promiscuous mode
[   55.829643][ T7340] debugfs: Directory 'hsr0' with parent '/' already present!
[   55.839594][ T7345] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.846697][ T7345] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.854702][ T7345] device bridge_slave_1 entered promiscuous mode
[   55.879972][ T7345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.897479][ T7345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.935990][ T7345] team0: Port device team_slave_0 added
[   55.943528][ T7345] team0: Port device team_slave_1 added
[   56.041930][ T7345] device hsr_slave_0 entered promiscuous mode
[   56.079858][ T7345] device hsr_slave_1 entered promiscuous mode
[   56.119507][ T7345] debugfs: Directory 'hsr0' with parent '/' already present!
[   56.128040][ T7338] 8021q: adding VLAN 0 to HW filter on device team0
[   56.137299][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.145229][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.167565][ T7362] chnl_net:caif_netlink_parms(): no params data found
[   56.182737][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.191427][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.199890][ T7344] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.206926][ T7344] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.244754][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.253732][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.262922][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.270065][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.277941][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.287217][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.350887][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.359529][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.370425][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.379149][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.388344][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.397123][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.405717][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.425983][ T7362] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.435385][ T7362] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.443315][ T7362] device bridge_slave_0 entered promiscuous mode
[   56.453400][ T7362] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.460592][ T7362] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.468613][ T7362] device bridge_slave_1 entered promiscuous mode
[   56.482300][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.493361][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.505539][ T7338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.516479][ T7375] chnl_net:caif_netlink_parms(): no params data found
[   56.540857][ T7340] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.560441][ T7362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.571360][ T7362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.616967][ T7362] team0: Port device team_slave_0 added
[   56.624922][ T7362] team0: Port device team_slave_1 added
[   56.641622][ T7340] 8021q: adding VLAN 0 to HW filter on device team0
[   56.663041][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.671194][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.678781][ T7375] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.686104][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.698154][ T7375] device bridge_slave_0 entered promiscuous mode
[   56.706385][ T7375] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.713500][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.721511][ T7375] device bridge_slave_1 entered promiscuous mode
[   56.743984][ T7338] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.773917][ T7375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.785909][ T7375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.796344][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.807636][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.816304][ T7344] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.823410][ T7344] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.831287][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.839889][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.848130][ T7344] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.855221][ T7344] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.862881][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.871871][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.882503][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.891155][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.899684][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.908153][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.916770][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.925056][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.933772][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.942774][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.992638][ T7362] device hsr_slave_0 entered promiscuous mode
[   57.030002][ T7362] device hsr_slave_1 entered promiscuous mode
[   57.089694][ T7362] debugfs: Directory 'hsr0' with parent '/' already present!
[   57.099350][ T7340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.116326][ T7340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   57.141437][ T7345] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.151160][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   57.159974][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.175601][ T7340] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.203544][ T7345] 8021q: adding VLAN 0 to HW filter on device team0
[   57.219742][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.235173][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.256585][ T7375] team0: Port device team_slave_0 added
[   57.285433][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   57.300455][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   57.310605][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.317976][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.325791][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   57.334491][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   57.342873][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.349950][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
10:50:12 executing program 1:
set_mempolicy(0x0, &(0x7f0000000040), 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071185400000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912461917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646cb77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000640)={0x16, 0x7, 0x0, {{0x9, 'subj_user'}}}, 0x16)
socket$inet6_sctp(0xa, 0x5, 0x84)

[   57.357732][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   57.366798][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   57.384769][ T7375] team0: Port device team_slave_1 added
[   57.407965][ T7345] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.418524][ T7345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.470607][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   57.478530][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   57.508890][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   57.519803][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   57.528740][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   57.538453][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   57.555879][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   57.564432][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   57.573153][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.581772][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   57.590474][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   57.627943][ T7362] 8021q: adding VLAN 0 to HW filter on device bond0
10:50:13 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

[   57.682157][ T7375] device hsr_slave_0 entered promiscuous mode
[   57.724016][ T7375] device hsr_slave_1 entered promiscuous mode
[   57.789536][ T7375] debugfs: Directory 'hsr0' with parent '/' already present!
[   57.801205][ T7362] 8021q: adding VLAN 0 to HW filter on device team0
[   57.818708][ T7345] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.826939][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.838262][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.855718][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   57.865196][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   57.878005][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.885106][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.927835][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   57.959201][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   57.969496][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   57.990465][ T2841] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.997549][ T2841] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.009468][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.018463][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.032036][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.043088][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.054999][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.065025][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.073713][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   58.082134][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.091025][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   58.100531][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.110864][ T7362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   58.130333][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   58.154484][ T7362] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.186802][ T7375] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.205536][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   58.226898][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.248340][ T7423] mmap: syz-executor.3 (7423) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   58.248742][ T7375] 8021q: adding VLAN 0 to HW filter on device team0
[   58.292054][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.301381][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.317272][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.324384][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state
10:50:13 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x3, 0x9)
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r0, r0, 0x0, 0x3f)

[   58.350980][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   58.399238][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.413148][ T7429] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   58.442043][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.454279][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.462176][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.475729][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.487195][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.504022][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.512888][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.531566][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.544859][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.555019][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.570772][ T7375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.597752][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
10:50:14 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0xc0010058}]})

10:50:14 executing program 1:
set_mempolicy(0x0, &(0x7f0000000040), 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071185400000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912461917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646cb77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000640)={0x16, 0x7, 0x0, {{0x9, 'subj_user'}}}, 0x16)
socket$inet6_sctp(0xa, 0x5, 0x84)

10:50:14 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:14 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0)
remap_file_pages(&(0x7f000012a000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3)

[   58.617199][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   58.676342][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.716080][ T7375] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.724391][    C0] hrtimer: interrupt took 43892 ns
10:50:14 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl(r0, 0x4000000002283, &(0x7f0000000100)="34b9")

10:50:14 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x3, 0x9)
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r0, r0, 0x0, 0x3f)

10:50:14 executing program 1:
set_mempolicy(0x0, &(0x7f0000000040), 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071185400000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912461917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646cb77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000640)={0x16, 0x7, 0x0, {{0x9, 'subj_user'}}}, 0x16)
socket$inet6_sctp(0xa, 0x5, 0x84)

10:50:14 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:14 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0xc0010058}]})

10:50:14 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0)
remap_file_pages(&(0x7f000012a000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3)

10:50:14 executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x3, 0x9)
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r0, r0, 0x0, 0x3f)

10:50:14 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x3, 0x9)
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r0, r0, 0x0, 0x3f)

10:50:14 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0)
remap_file_pages(&(0x7f000012a000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3)

10:50:14 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x3, 0x9)
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r0, r0, 0x0, 0x3f)

10:50:14 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0xc0010058}]})

10:50:15 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl(r0, 0x4000000002283, &(0x7f0000000100)="34b9")

10:50:15 executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x3, 0x9)
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r0, r0, 0x0, 0x3f)

10:50:15 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x3, 0x9)
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r0, r0, 0x0, 0x3f)

10:50:15 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0xc0010058}]})

10:50:15 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x3, 0x9)
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r0, r0, 0x0, 0x3f)

10:50:15 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0xc0010058}]})

10:50:15 executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x3, 0x9)
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r0, r0, 0x0, 0x3f)

10:50:15 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0xc0010058}]})

10:50:15 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0)
remap_file_pages(&(0x7f000012a000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3)

10:50:15 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0xc0010058}]})

10:50:15 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0xc0010058}]})

10:50:15 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x3, 0x9)
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r0, r0, 0x0, 0x3f)

10:50:15 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0)
remap_file_pages(&(0x7f000012a000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3)

10:50:16 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0xc0010058}]})

10:50:16 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0)
remap_file_pages(&(0x7f000012a000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3)

10:50:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0xc0010058}]})

10:50:16 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0xc0010058}]})

10:50:16 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0)
remap_file_pages(&(0x7f000012a000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3)

10:50:16 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0)
remap_file_pages(&(0x7f000012a000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3)

10:50:16 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0)
remap_file_pages(&(0x7f000012a000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3)

10:50:16 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:16 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0xc0010058}]})

10:50:16 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:16 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0)
remap_file_pages(&(0x7f000012a000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3)

10:50:16 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:16 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0)
remap_file_pages(&(0x7f000012a000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3)

10:50:17 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0)
remap_file_pages(&(0x7f000012a000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3)

10:50:17 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:17 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:17 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:17 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:17 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:17 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:17 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:17 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:17 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:17 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:17 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:17 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:17 executing program 4:
set_mempolicy(0x0, &(0x7f0000000040), 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071185400000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912461917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646cb77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000640)={0x16, 0x7, 0x0, {{0x9, 'subj_user'}}}, 0x16)
socket$inet6_sctp(0xa, 0x5, 0x84)

10:50:17 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:18 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:18 executing program 3:
set_mempolicy(0x0, &(0x7f0000000040), 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071185400000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912461917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646cb77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000640)={0x16, 0x7, 0x0, {{0x9, 'subj_user'}}}, 0x16)
socket$inet6_sctp(0xa, 0x5, 0x84)

10:50:18 executing program 4:
set_mempolicy(0x0, &(0x7f0000000040), 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071185400000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912461917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646cb77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000640)={0x16, 0x7, 0x0, {{0x9, 'subj_user'}}}, 0x16)
socket$inet6_sctp(0xa, 0x5, 0x84)

10:50:18 executing program 0:
set_mempolicy(0x0, &(0x7f0000000040), 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071185400000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912461917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646cb77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000640)={0x16, 0x7, 0x0, {{0x9, 'subj_user'}}}, 0x16)
socket$inet6_sctp(0xa, 0x5, 0x84)

10:50:18 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$9p_xen(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/111, 0x6f}], 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x10, 0x0, 0x2}, 0x10)
r1 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x16)
close(r0)

10:50:18 executing program 4:
set_mempolicy(0x0, &(0x7f0000000040), 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071185400000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912461917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646cb77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000640)={0x16, 0x7, 0x0, {{0x9, 'subj_user'}}}, 0x16)
socket$inet6_sctp(0xa, 0x5, 0x84)

10:50:18 executing program 5:
set_mempolicy(0x0, &(0x7f0000000040), 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071185400000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912461917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646cb77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000640)={0x16, 0x7, 0x0, {{0x9, 'subj_user'}}}, 0x16)
socket$inet6_sctp(0xa, 0x5, 0x84)

10:50:18 executing program 0:
set_mempolicy(0x0, &(0x7f0000000040), 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071185400000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912461917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646cb77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000640)={0x16, 0x7, 0x0, {{0x9, 'subj_user'}}}, 0x16)
socket$inet6_sctp(0xa, 0x5, 0x84)

10:50:18 executing program 3:
set_mempolicy(0x0, &(0x7f0000000040), 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071185400000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912461917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646cb77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000640)={0x16, 0x7, 0x0, {{0x9, 'subj_user'}}}, 0x16)
socket$inet6_sctp(0xa, 0x5, 0x84)

10:50:18 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

10:50:18 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1000)
connect$inet6(r2, &(0x7f0000000140), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355)
syz_open_procfs(0x0, &(0x7f00000000c0)='auxv\x00')
ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000002c0)={0x8000, 0x6, 0x19, &(0x7f0000000100)="d44e3c2b9ca92c6b88544157e3d7031a50df6275c1decebd61"})
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x111000000, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
getpgid(0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000300)={'icmp6\x00'}, &(0x7f0000000340)=0x1e)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

[   63.167775][ T7662] ==================================================================
[   63.175975][ T7662] BUG: KCSAN: data-race in page_counter_try_charge / page_counter_try_charge
[   63.184722][ T7662] 
[   63.187059][ T7662] write to 0xffff88821b66f150 of 8 bytes by task 7338 on cpu 0:
[   63.196778][ T7662]  page_counter_try_charge+0x7e/0x170
[   63.202154][ T7662]  try_charge+0x182/0xb50
[   63.206483][ T7662]  __memcg_kmem_charge_memcg+0x48/0xd0
[   63.211942][ T7662]  __memcg_kmem_charge+0xcf/0x1b0
[   63.216965][ T7662]  __alloc_pages_nodemask+0x38f/0x4d0
[   63.222326][ T7662]  alloc_pages_current+0xd1/0x170
[   63.227349][ T7662]  pte_alloc_one+0x30/0xa0
[   63.231762][ T7662]  __pte_alloc+0x2d/0x220
[   63.236380][ T7662]  copy_page_range+0x1243/0x1860
[   63.241399][ T7662]  dup_mm+0x74a/0xba0
[   63.247109][ T7662]  copy_process+0x32c9/0x37f0
[   63.251777][ T7662]  _do_fork+0xfe/0x6e0
[   63.255846][ T7662]  __x64_sys_clone+0x12b/0x160
[   63.260608][ T7662]  do_syscall_64+0xcf/0x2f0
[   63.265091][ T7662] 
[   63.267414][ T7662] read to 0xffff88821b66f150 of 8 bytes by task 7662 on cpu 1:
[   63.274954][ T7662]  page_counter_try_charge+0x58/0x170
[   63.280318][ T7662]  try_charge+0x182/0xb50
[   63.284636][ T7662]  mem_cgroup_try_charge+0xd2/0x260
[   63.289824][ T7662]  mem_cgroup_try_charge_delay+0x3a/0x80
[   63.295451][ T7662]  do_huge_pmd_anonymous_page+0x3df/0x10a0
[   63.301253][ T7662]  __handle_mm_fault+0x1f88/0x2d00
[   63.306362][ T7662]  handle_mm_fault+0x21b/0x520
[   63.311144][ T7662]  __do_page_fault+0x3fb/0x9e0
[   63.315911][ T7662]  do_page_fault+0x54/0x233
[   63.320409][ T7662]  page_fault+0x34/0x40
[   63.324548][ T7662] 
[   63.326897][ T7662] Reported by Kernel Concurrency Sanitizer on:
[   63.333048][ T7662] CPU: 1 PID: 7662 Comm: syz-executor.2 Not tainted 5.3.0+ #0
[   63.340493][ T7662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   63.350544][ T7662] ==================================================================
[   63.358608][ T7662] Kernel panic - not syncing: panic_on_warn set ...
[   63.365188][ T7662] CPU: 1 PID: 7662 Comm: syz-executor.2 Not tainted 5.3.0+ #0
[   63.372646][ T7662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   63.382684][ T7662] Call Trace:
[   63.385979][ T7662]  dump_stack+0xf5/0x159
[   63.390234][ T7662]  panic+0x209/0x639
[   63.394120][ T7662]  ? vprintk_func+0x8d/0x140
[   63.400525][ T7662]  kcsan_report.cold+0x57/0xeb
[   63.405286][ T7662]  __kcsan_setup_watchpoint+0x342/0x500
[   63.410823][ T7662]  __tsan_read8+0x2c/0x30
[   63.416107][ T7662]  page_counter_try_charge+0x58/0x170
[   63.421476][ T7662]  try_charge+0x182/0xb50
[   63.425799][ T7662]  ? __rcu_read_unlock+0x62/0xe0
[   63.430725][ T7662]  mem_cgroup_try_charge+0xd2/0x260
[   63.435931][ T7662]  mem_cgroup_try_charge_delay+0x3a/0x80
[   63.441562][ T7662]  do_huge_pmd_anonymous_page+0x3df/0x10a0
[   63.447448][ T7662]  __handle_mm_fault+0x1f88/0x2d00
[   63.452927][ T7662]  handle_mm_fault+0x21b/0x520
[   63.457685][ T7662]  __do_page_fault+0x3fb/0x9e0
[   63.462448][ T7662]  do_page_fault+0x54/0x233
[   63.466960][ T7662]  ? prepare_exit_to_usermode+0x154/0x1a0
[   63.472668][ T7662]  page_fault+0x34/0x40
[   63.476815][ T7662] RIP: 0033:0x440cd9
[   63.480698][ T7662] Code: b7 0e 66 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e 89 0f 48 83 c6 04 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e <48> 89 0f 48 83 c6 08 48 83 c7 08 81 e2 f0 00 00 00 74 1f 0f 1f 40
[   63.500290][ T7662] RSP: 002b:00007ffccd5ab238 EFLAGS: 00010202
[   63.506354][ T7662] RAX: 0000000020000000 RBX: 0000000000000000 RCX: 0030656c69662f2e
[   63.514329][ T7662] RDX: 0000000000000008 RSI: 0000000000760020 RDI: 0000000020000000
[   63.522286][ T7662] RBP: 0000000000760000 R08: 0000000000000000 R09: 0000000000000004
[   63.530329][ T7662] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[   63.538291][ T7662] R13: 00007ffccd5ab420 R14: 0000000000760008 R15: 00007ffccd5ab430
[   63.547493][ T7662] Kernel Offset: disabled
[   63.551814][ T7662] Rebooting in 86400 seconds..