0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:01 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:01 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:01 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @multicast2}, 0x0, 0x0, 0x2, 0x2}}, 0x2e) 22:26:01 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:01 executing program 5: socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000), 0x4) 22:26:01 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:01 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:01 executing program 1: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:01 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:02 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x1, @tick, 0x0, {0x200, 0x80}, 0x401, 0x0, 0x5bb}) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) [ 326.946827] 9pnet: Insufficient options for proto=fd [ 327.003474] 9pnet: Insufficient options for proto=fd 22:26:02 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:02 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:02 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x20000000, 0x100000000000031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000), 0x4) 22:26:02 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:02 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) close(r2) 22:26:02 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x4, 0x0, {0xa, 0x4e21, 0x2, @mcast2, 0x4}}}, 0x3a) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6}) fcntl$setlease(r1, 0x400, 0x2) r3 = getpgrp(0xffffffffffffffff) syz_open_procfs(r3, &(0x7f0000000000)='coredump_filter\x00') 22:26:02 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:02 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) 22:26:02 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) close(r2) 22:26:02 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:02 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:02 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x1, 0x3, 0x2, 0x4}}, 0x131) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) socketpair(0x2, 0xa, 0x3, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0xc) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x101000, 0x0) accept$alg(r2, 0x0, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000)) 22:26:02 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 327.395938] 9pnet: Insufficient options for proto=fd 22:26:02 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:02 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0xffffffffff, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000), 0x4) r1 = dup(r0) r2 = fcntl$getown(r0, 0x9) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001180)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000011c0)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000012c0)=0xe8) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001580)=0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000015c0)=0x0) r8 = fcntl$getown(r0, 0x9) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000002dc0)={@remote, 0x64, r4}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f00)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000001ec0)='%\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002940)={0x0, r1, 0x0, 0x1, &(0x7f0000002900)='\x00'}, 0x30) stat(&(0x7f0000002980)='./file0\x00', &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002ac0)={{{@in6=@mcast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000002bc0)=0xe8) r15 = getgid() sendmsg$netlink(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000080)={0xb8, 0x2c, 0x12, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x14, 0x1b, @str='@-vboxnet1@/\\\x00'}, @generic="b3e79875898b534aee1829f8e4f27c269edc1c2e7d8e3952b72622d7b9800e9adc4d8a9ae93148942d749635345624d529268b02251347e5d49943a224818efc56e52bcf18eb9f36a05599c0f7d0206e6ceff3bb0c831bb42202e8e3896cec5525f84d8df91c3a2a14cee285c4a1056abac2b8c8a352a305a214dffea58c1dc29d8eddef7e875a96a0b9954286052a694455"]}, 0xb8}, {&(0x7f0000000140)={0x1018, 0x1b, 0x501, 0x70bd28, 0x25dfdbfb, "", [@nested={0x1008, 0x1d, [@generic="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", @typed={0x4, 0x57}]}]}, 0x1018}, {&(0x7f0000001300)={0x238, 0x16, 0x100, 0x70bd28, 0x25dfdbfb, "", [@nested={0x154, 0x23, [@generic="f8768467582cb780d88cf390000bae5855944be3e2ce6fb5e0a37577a7744efc0fd700178e752e7cfcd42994725fbfe3a319ebe62a9d", @generic="51a6db9c8220737eea58dc788fc0556c73a58f0dbf3fad00696b4eec36b9fccd02edb72ccc0ccb4d39affef1fae220b703d1ef7f6ea151f0ce72c599494946418b3830396423084fb45c4e25af2db0e4691616adee4f9bf20baa701af540d7b5245ec65068876b9e8a5b5617690523a80bff1156d42b57ec0ca7a708de157bc1f132a0b62e8f2b94c7e87cc6c168f3466ce0fb8cc7b334aec7b06089def059af0cdeb08f3ad0ce36be7c0d51af30a755a6dc84b275de63140b626eb3f449295d17da130661e86c929fdb8253798cd97fdd", @typed={0x8, 0x4e, @pid=r2}, @generic="b468ae2884ef665b313051c3f0cf4ec3ce7812b5a8796c06f9343961688acd58a56a3ee383e61f0a2d05c91af91f822832bae597f6046c06d894d54fab71238f"]}, @nested={0x10, 0x60, [@typed={0x4, 0x32}, @typed={0x8, 0x1d, @pid=r3}]}, @generic="d0ab270f9ff5c8f364ceac204eca6676bf23067c16fa449a418bcaad7910fec9dedc15384ba0f38dba7cd07ade6283795f7f58c183aa8b5c00754a587dcbf6314fc46e30f822b50dd0b26a98f143bb3807681d65ca9bde58c4675752425ecbb4513c66d15ae76bccc1d92f68e9a0dc7f7f7449fd33f4a6e00961a5647039129a2f0b0a051e8de8e6a3456e0e8710", @generic="de7e2130e6dd127bc2dfb9ace0c8882d", @typed={0x8, 0x4b, @str='/\x00'}, @typed={0x8, 0x59, @uid=r5}, @typed={0x14, 0x17, @ipv6=@local}]}, 0x238}, {&(0x7f0000001540)={0x18, 0x20, 0x306, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x35, @fd=r0}]}, 0x18}, {&(0x7f0000001600)={0x768, 0x42, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@nested={0xc, 0x89, [@typed={0x8, 0x2f, @str='%\x00'}]}, @typed={0x8, 0xa, @u32=0x10000}, @typed={0x8, 0x20, @pid=r6}, @generic="7a4acf12c86c389ea26a759b2d22c36ed66a4c34868052a6ff278a745b540720fdcc15084d6c4f4e8d5c203daabb4c1d137a6b2eebd54979326c7cbf7aaef79a12c0427340438bd122373a47ec5421c5071949727546e4478b01b818a40457b7ca79855c741c18b5d23f11e425ac9a270fe1d5f6004f3e18e115cc44e501d674a165453e59a6945bc47efe6bcf9b06f6d4e493f8638204eafaded567c0316b43f917162b8e6648dd756c99a21e357dc8516543748e73971c2761293b4c222e4b47f557e61d8d05e4634fb8827507ad6574844a66b7729354ca548155d5a9070d4aa3b0428d1b263cb02f", @typed={0x4, 0x5}, @generic="9aea9c943250aa8c0aa55e832516308f23ed962e56532b05147d8cd96b017d7e80ade7ce155129533ac613e803cc067f804bf705e0642073176e861963819e51cb5036cc715aedc6e4041f2e9081809a89e18a158c4f5f791895b59e0e3f225e9e0ba2d3c0ed86e149b25c162364c6ff4ab64b99aa37c12c1fe9cdad2eb3e4de491602b39480cb5550e47e118e6428c094ee74ccdee8f06444ffeb3a6e1c892eb9c352c4d4e881ca4d892d7b66b1fc36fe27489a98cfbdf21d7f4ffa0f2ad77e7d3fda5dd9ccfd6ce43f3a1a7b2d0ba4465759da42e76cf035a4d64049f2c3c8d71ed22c272a4b4463", @nested={0x100, 0x58, [@typed={0x4, 0x41}, @typed={0xc, 0x61, @u64=0x2}, @generic="b5063c9d96bea96dc3f9b3933d3c0ee0fa6359b9776c6747eed6fc2d183ca365995f484d13ff7bd42c1e7f0931eb2ca7fd69d0c98de951bdb1f05b275f4e2ea1f4794d6aba93122fb872d59dc3c09ffc9ef11abdf44300079a2f8be002ee3db0a998f9cc2e66429758d216cf32aebc228c5173a60b53b9a804d6356d551cfcbc0f041cf4d24fd1a8fb37843bb9c88ac0d0a57f0e9c6b66f0a933d78442760b9154c476a6187389dc01cb3dc3cf12c2f1b2b54ea32ba0516349424f919c67afe269e863a3ec7485e9add363e58f78325c43d8e82b582f4fe4", @typed={0x14, 0x81, @ipv6=@local}]}, @generic="d823fb0ede3cc76109313520afd5e415dd98cdbe27eb170366420bcb36930228ce9832b99bca96f22b8a4f39df4288bfc40af1631bdfd02043217130b2e6cec025d2dccc393cb49fab906eba1bb51df71a0dc677dd600d245828ddd6440a30fee53c15b9a40cb755dba4138a8e63eafeece4bcbbc2173420e8d7cf8bc1deb0ec4b972b0daeac18b96defbb2f2946e19b43b76cea929829b7367bc2a20d9d6babebb7da1b1c44bb86b99e9a0dda5453c044a9be6edf3ba369494a", @nested={0x3a8, 0x2f, [@generic="2350b52deff3d01979d86010be4a7e9ad9f37689f1fd6c993cd6d81390692b1c3fcb1a93c0b2ff665681f5503efdb7e2f61ddd5b1dd8c65cf736183f4892b11ac8b987253c2a86866a8fc0a4c65c676a42c8ba2e6c1ed61e7eadad56c0dca63a111290198a48766e5f019a969f9edb04b16d5996f47f379b6302ac77e298bfb6106a35e53907d1b8fae8501d20", @generic, @typed={0xd0, 0x32, @binary="c11e86007a7e71bab7c4cebb375b00de39946bc123a0257db35a1ac72bf9a9a859a7b56e5555702ec9d133e57b561d5392850209dcc5545dd2891a787759e11717e48a6a9bca15e4dd782c72d62a54fda968ca7743a40ab55a92135b440ee7d3736131447dfe640845e8fb75187b4d243055f5f6a2ca7b61015fc6e9c0fe7fbb6fb9e2d51ab049961503db64a378edf57fddeac5d781383b872a98dda7d1b52729f088c23870aa80ddae019ce663c85e27c2722017f390d44adce9b3d19ef9f46cc270041f377d05b96de3bb"}, @generic="d011f7980f6e43a1c1f4fa01edeb62e2e4ea476903836a7de4ca9d6edcab8fcbb2e6f92910270a21ac79a7a76dae8b901de35efb5df8794a2d100d18b1c314050b9a804571177de5b4c682fb62be5f2a9810f330355816ccb0cced395c50ebbeb399bcc3953f769892a0fa841ab33b7cef2f5fbf3ebe7c70e4cb8ca4cf956e74eedd8fc1ea78c0223dc2b4bd37a2d4109113620dd62e9880aec9e521774643fbcb902f2449789ee73bd8d1aada2604c6e4503d04a10e5b376b1c30890cca", @typed={0xc, 0x58, @str='em0eth0\x00'}, @generic="f92e815d3bd6d69504ed3068165fe698d0c366a2b9f48b380888a60b8c832491843bae3a4346013acfbacc4a765a042a0dee9ef92af48faa6a5055fed996e4a160c42bae0fbc55b5ac015442e3d835294420e579875a40e7753539a3c6e4f22f8bda2aefc3a9d1b5d22df4181a51c2aabb63c83a41055b7d2cefcf42c1b2615a5decab298f75cd50ca71d01e61c42eb0910b3a09842647c16c71f8", @typed={0x8, 0x82, @pid=r7}, @generic="80ba575d4ea76ba3f7083b360c648f3b69e97ad9029170f492a3b34a267f24317754153408e3ac4d71efeb5473459e799ee9cdb00c0cb626304458596a5247e16662b80af537a90165ab73591bb1c4e74614b7c33d852ae6a3244d0d0c9a123cd38b139569eaf149fb173b89c117dc4dc2caabffdd86ae2104f32fbcd9198726052a9b45a6c72490b84b05e513e7ff289fe78f40f76b0f0dc942f45874ce66384664e997e6ed9254d309690dc8beec7d9090fa650841845c980101eda66550a2cebbc30e85bb69a3cbed0c861433aeda9b4540fb733f38"]}]}, 0x768}, {&(0x7f0000001d80)={0x18, 0x35, 0x720, 0x70bd28, 0x25dfdbfe, "", [@typed={0x8, 0x5b, @pid=r8}]}, 0x18}, {&(0x7f0000001dc0)={0xcc, 0x34, 0x0, 0x70bd28, 0x25dfdbfe, "", [@nested={0xbc, 0x53, [@generic="b57c474305e2214240fd3930a2851136dbddef377b6daa90276962ac3387b92991065dd747849799073e70d99a51e8dc9c3ca768527978fabccdbbb3b560701a7040d45439dc7b8b61378cf6e3cbb8e56155eba90684", @generic="d426cbd87ffadebb95823d96b87630d4eeebf9822d3f5f63fefa85abe8f807e3df5d2de6c4f36dfce896813bbf2ceadac3bce9694fa59881521f4a85859e10c92a672485267f2ba0fedd1201c548557535ed414811b022224cd3c639d0a5dd90"]}]}, 0xcc}, {&(0x7f0000001f40)={0x90c, 0x38, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@generic="bbc7a85804ef2eb76b5118cd0f474c3bc9fab58eb1e66c76c391d143e59757287179af7430143d81d149c46b91266fc34cb5816a74cf62ef86cb694ca38eb339b0279acc0166ba282cd005f346ace6f918867840d8490011c0b435962b023dfe46ab10a6b5781805262242550be8ef4e706efddbe0944be795ea8841bf28d8d326784b5611575e003eb859129086ae91197e2443d141bf22f83b478bef1f31399a5f539edf0447a913b149e96d22ee8603aa3af35e05a9d073a917a5a91e34d6daf7722a6781e6441dca4a630c4c32cd1e96e15f400752", @nested={0x3a8, 0x6d, [@generic="275cf8b04ac1336306313bb5eb59d0e12499c5db4205fb63d5ef2dcc70a39c62c554f661ce48298964196fba9683d9bdb54fbd5492fc722f609e8978ea1829d680cac15fc107bb038c44831d8549b7844c586f9ae06ccfbccd343bd0dd43764f028e0227e5d9a7741a2d0241a6b3fd16fcfe208de24796282a7b118e5cc65de38da44985d151dca81ca0fe8432f4fb5a80c7f78b20d253c4639e52fe17440bac333b329511922b9acca98400251203c9fd5c8dec344e37ba2604a3b7f0103d4c06de6c62471dfa40bfde24f75da21334b03b7a7b41ee12652bc2e429f0a93ab90bab0dce467e24ad8592300b55c1cdbec22b0f", @generic="ee234e1aec6d215899f716db3efb9dd4e2bf31cdd7615bd127032066bb5baf4547df4bff381f954886b6a51706c2c3d886372302da088f2c8c05b16aed78b4ee93af0f022a39e4fda75fe3347a5d536f0e74f5a9f3ffaed85971e731ece3ac95cef5d4322113ab7215dc7bc1632d315aabd9fd07510b62d6fb028877e0bac074d7b9a25066ed19617ba66f01ee4e454d99aef639c35ec925c113723f8ab5fb94e3adec013855ada36eaacfb0db350df11b1830f5c4c2c263fa8d17a70a9585975e95e66f383739d5399d95fec24715611e3d", @typed={0x8, 0x96, @pid=r9}, @generic="60183795eb3f58b6db68acee45bb09de7c391815d4826ec9168b4836dfa19bfe3ad7bd3ae71dfe1e9510294a21ec099bf6317ba2ff6b0304c3f690c8b92226a599f2c1aa041db09237819edccd200fde6a24ff2f19ecd3bdd2b8dd121b4e5d07039489be233ccc037de9651c8216d92d2fcb81cedfe237a4", @typed={0x14, 0x2d, @ipv6=@loopback}, @generic="419da5332cbe81c92ad4c2affe38c0567fd9ae02e9fe3bd3120afc70f21f30f52c56814ab87df94c80b2ad76f2fb42dd339f4bbdb7986ff26f1fbe9e6428bb033e4bbca2ddaee94c6cc5a20539b3fc1c19cef06e2d0b79c2e9b1deeb37ec359cb68ca58fab8948b9bffa0c500fec245bd664f9bf51b1", @generic="6f1356f1ffceebd2f1d465d42d75f30d34c118840d4b72c88151ebe17634567345e01be1453775a3c1b7bc00d0b14cda9792ac3c87de9ca64a651b18d6d0086f184aabaf2be1b61d7bacf117292152ace212d0e052fd6cb8d3642eb7e406310dd876d0ac29e72b3fe2c4a6acf607f8ff8870b6a0faaa65fd1fd9a1e53c1b33f3e472ab5533ebe88a3a927cebbf44d35f2e7d55f332fa517d03617dba63e283a43364ef3c03ea2b43f88e9d96990e3efd4beffa18520265708aa9f1592d72a2407f6085d064e274ca174be08cad6da21383cb31b3"]}, @nested={0x298, 0x17, [@generic="9d772878013b3b74fcd38f6446e6aec929d6cb4066dd5b368b04d2f3295a80827c1dc43211225e64e58c608ea2ff9def09291db7c59cce7fc707ffc581ec5d6ab8d0f725121124f37d5d07e84a775da48eaa7fb6547fdb3538ebd618da3e7e1efc63499b43f315bdc314be6eed48acbbead10feff8d306476ab0fc14036ce457fd805b72e917e8e9ac1189409764d34bec16b7f20ac43ebbadaeabda31f42ce79a9a87aa8e5e349282fb3d6fb20f873c20fd8068dcd0d5eb538d3f56737c88fdf685d41648b4ddfe6f2d9698ff583fafa4b312ce133b33031817b5615673ac298d5b52f28fa11026a13d8d26dabe49f5b9", @generic="515133c25702bc2bd960d37c8a20f04785edb8e51a0b9fa8d6ce7fd6c55f2726b0c192ba4dabd6796382b9c0d42646bd5f97d3888c0c4f8a7022a600342a94b72e54009203314a172711f10d0fc7c882df809f0dca83aadc736b39ca305ad530d80e2e3dc16dcc34f3c43946566d96b6a28a1c91c2dd7a82a123f73d1909b45888684eec21bdd3101fdb18812bfe28", @generic="bfd9383e16d141785ff28cbf99df80358ab06bfdfc6bb6ccba4691cc319838413ae17c646bacaae341067e2c46c3326cfadbdce81756458318f7556aa83094be87f266007f567f94cf34e00856b469462195d1d35c4d7c06894d881b84bef7fa6773e6dcbd61575d6cabb2fd11f2ec3a060e467bde7263f5f23dd92bc603c23d39bdfce97fa8ea1d3432ab0876e37a7f3e35e87b89590cb8522309294e632a9aedd5b2dc486c1271c0b70bc3205f0f62fc441236fda8b8e3c5e78095b0641c11c8cba94e11d6c5", @generic="90daf87c", @typed={0x8, 0x7f, @fd=r1}, @generic="58d2d66c13822a1150d2131ba18d631d21adfd94fec1a89594d0a3dc22a5735bdd3cc67be7cc3378824c750fbccb22ab49b5ee9dbd4686e1380498bd9fe217c283"]}, @nested={0xc4, 0x65, [@typed={0x4, 0x42}, @typed={0x70, 0x1, @binary="c7c889b64729beef9b56049ef23f02c9645aa1049a05f1a2631582c263eccdb53b7b3fcc512fcea65a13f3b1505275633f0d8e8236b5142292b6ef568344064539a89f5020cc890984ea9182ea32123a5a94a3d397288d4a3c40f224721a2ab8801ebe98577dad637f14"}, @generic="68f7d71bf8619f5e9e05ed683d9ee0be9b4d125eb5b00020899d819f5dd86701d87e012d2401b64fd31fcd6579ea3798113f2580217d697c68171219f071c611f52235697e8398feced0d5e7"]}, @typed={0x6c, 0x25, @binary="864eb4e51f41c68322d99eef956a1a7b79cf64c39a738700cadae973cb946e3dca110a8b147803f669127298b4bdba1ee2e976daa7d90b1c5ac7b687c7251135a43a5047d41e69e2661b471e2050f105334a7bc3ab75e0b7736a01f1654969c3743e30b93457fa21"}, @generic="4e1afb7457019acca3c6cabf6c96e34295d846d0bd1732798d3e61d3978ac3328cfcda0b4bfba97120da30149ae2887ce38a28615b8a8f8dc992bf87f4a7fa330e358704baec4f81bfcd918e3b99f0125bd9f05c06d285e2abc994fc4c694e4b2350a2ea062ecf186012c0cd593fb2aac731e73ef00cd0094d0d64076ccbbd479b649bfda7b151939b72fc2a19", @typed={0x8, 0x17, @ipv4=@local}, @generic="54dca8568b6d25a9c3ef6f90ac9985b28dd7248c6aa26e4e53b17be34723"]}, 0x90c}], 0x8, &(0x7f0000002c00)=ANY=[@ANYBLOB="20000000000000000100002202000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x8040}, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000040)={0x100}) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000002cc0)=""/213) 22:26:02 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) close(r2) 22:26:02 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:02 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 327.563268] 9pnet: Insufficient options for proto=fd 22:26:02 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:02 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(0xffffffffffffffff) [ 327.655842] 9pnet: Insufficient options for proto=fd 22:26:02 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x7, 0x402) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000280)={r3}, &(0x7f00000002c0)=0x8) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r4, 0x80487436, &(0x7f0000000040)={0x1fffd}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYBLOB="030000003b02510677e00d9c87c9244bc80289afd38c5fe96d0715efb9af82c4cf7d8b040096861c850d111023a478a206d41f59099787cf893ee1b27e9d327b09fb28a60016c8c56f01e86c8067106418b775fafff25401d57eaaeb476c130146f67e0972a3e1645275aabaff800cd8fd6012e92e17f0113b91c5d46da0d4d412a29c33a8f89f3cc706e6e79ccd61e58dd6aa41832ff1"]) 22:26:02 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:02 executing program 5: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={@dev={0xfe, 0x80, [], 0xe}, 0xa, r1}) mmap(&(0x7f0000827000/0x400000)=nil, 0x400000, 0x0, 0x100000000000034, r0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x0, &(0x7f0000000000), 0x4) 22:26:02 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:02 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:02 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 327.901506] 9pnet: Insufficient options for proto=fd 22:26:03 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x578e2f62, 0x10000) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000080)=0x3f, 0x4) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x22) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$unix(r0, &(0x7f0000000180)=""/19, 0x13, 0x40010001, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x4) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000000), 0x4) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000140)={0x81, 0x3ff}) 22:26:03 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd, 0xfdfdffff}) 22:26:03 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000780)='logon\x00', &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000900)='/dev/full\x00', 0xfffffffffffffff8) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:03 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:03 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @broadcast}, 0x3, 0x1}}, 0xfffffffffffffeee) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={r4, @in={{0x2, 0x4e23, @local}}, 0x59, 0x0, 0x5, 0x3f, 0x1}, 0x98) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:03 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getpeername$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000)=0x57, 0x4) io_setup(0x3, &(0x7f0000000140)=0x0) r2 = eventfd(0xfff) io_cancel(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x9, r0, &(0x7f0000000180)="6db37eb9810492efc21c7e44ca3fc8478f4aa3584e18afb534017b8dfa0c1f0c6196fc683ec2d7c2c63e715d01bdd217f1d0464162ee8ccd87e293e68df421bb3c30e028da224a21b29eb8e2a97143a644aec6863e9e065742053f69e25ed4ac140ac643fdc1563ba4820e63ba", 0x6d, 0x18, 0x0, 0x0, r2}, &(0x7f0000000240)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200080, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000280)={0x3, 0x9}) inotify_add_watch(r3, &(0x7f0000000100)='./file0\x00', 0x51000000) 22:26:03 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:03 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x84804) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x2840) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x100000000) r2 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x3}}) close(r3) 22:26:03 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:03 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[{0x2, 0x1}, {0x8, 0x40}], 0x2) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000380)=[0xffffffffffffffff]) getgroups(0x5, &(0x7f00000003c0)=[0xee01, 0xee00, 0xee00, 0x0, 0xee00]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f00000004c0)=[0xee01, 0xee01, 0xee00, 0xee00]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x5}, [{0x2, 0x4, r3}, {0x2, 0x0, r4}], {0x4, 0x1}, [{0x8, 0x5, r5}, {0x8, 0x4, r6}, {0x8, 0x7, r7}, {0x8, 0x2, r8}, {0x8, 0x2, r9}, {0x8, 0x6, r10}], {0x10, 0x1}, {0x20, 0x2}}, 0x64, 0x2) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:03 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000080)) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000), 0x4) 22:26:03 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x84804) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x2840) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x100000000) r2 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x3}}) close(r3) 22:26:03 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a0000002901000000000000000000000000000000"], 0x15) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:03 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:03 executing program 2 (fault-call:15 fault-nth:0): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:03 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) r3 = accept4(r0, &(0x7f0000000080)=@nfc, &(0x7f0000000100)=0x80, 0x80000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x118, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0xa}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffffffe}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @rand_addr=0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x80000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xad7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1c}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0xd2a3718e48b1fb3b}, 0x400000000040080) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x800, @mcast1, 0x3}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:03 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x84804) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x2840) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x100000000) r2 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x3}}) close(r3) [ 328.541346] FAULT_INJECTION: forcing a failure. [ 328.541346] name failslab, interval 1, probability 0, space 0, times 0 [ 328.573557] CPU: 0 PID: 12637 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #264 [ 328.580991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.590368] Call Trace: [ 328.593076] dump_stack+0x1c4/0x2b4 [ 328.596738] ? dump_stack_print_info.cold.2+0x52/0x52 [ 328.601976] should_fail.cold.4+0xa/0x17 [ 328.606066] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 328.611202] ? perf_trace_lock+0x7a0/0x7a0 [ 328.615454] ? graph_lock+0x170/0x170 [ 328.619269] ? _parse_integer+0x134/0x180 [ 328.619289] ? graph_lock+0x170/0x170 [ 328.619306] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 328.619319] ? _kstrtoull+0x188/0x250 [ 328.619337] ? _parse_integer+0x180/0x180 [ 328.619356] ? find_held_lock+0x36/0x1c0 [ 328.619392] ? ___might_sleep+0x1ed/0x300 [ 328.649017] ? arch_local_save_flags+0x40/0x40 [ 328.653636] __should_failslab+0x124/0x180 [ 328.657913] should_failslab+0x9/0x14 [ 328.661735] kmem_cache_alloc+0x2be/0x730 [ 328.665904] ? lock_downgrade+0x900/0x900 [ 328.670078] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 328.675656] getname_flags+0xd0/0x5a0 [ 328.679480] do_renameat2+0x319/0x1180 [ 328.683382] ? find_held_lock+0x36/0x1c0 [ 328.683405] ? kasan_check_write+0x14/0x20 [ 328.683431] ? wait_for_completion+0x8a0/0x8a0 [ 328.683450] ? user_path_create+0x40/0x40 [ 328.683467] ? __lock_is_held+0xb5/0x140 [ 328.696961] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 328.696982] ? check_preemption_disabled+0x48/0x200 [ 328.697005] ? __sb_end_write+0xd9/0x110 [ 328.710756] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 328.710772] ? fput+0x130/0x1a0 [ 328.710793] ? do_syscall_64+0x9a/0x820 [ 328.732646] ? do_syscall_64+0x9a/0x820 [ 328.736648] ? lockdep_hardirqs_on+0x421/0x5c0 [ 328.741258] ? trace_hardirqs_on+0xbd/0x310 [ 328.745608] ? __ia32_sys_read+0xb0/0xb0 [ 328.749690] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 328.755084] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 328.760603] __x64_sys_rename+0x5e/0x80 [ 328.764611] do_syscall_64+0x1b9/0x820 [ 328.768537] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 328.773962] ? syscall_return_slowpath+0x5e0/0x5e0 [ 328.778919] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.783793] ? trace_hardirqs_on_caller+0x310/0x310 [ 328.788844] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 328.793893] ? prepare_exit_to_usermode+0x291/0x3b0 [ 328.798936] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.798962] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 328.798975] RIP: 0033:0x457579 [ 328.798992] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 328.799001] RSP: 002b:00007fe586f25c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 22:26:03 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x200001, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) r1 = dup3(r0, r0, 0x7fffd) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimensat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={{r2, r3/1000+10000}, {0x77359400}}, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000), 0x4) setsockopt$llc_int(r0, 0x10c, 0xf, &(0x7f0000000280)=0x8, 0x4) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000002c0)={0x30, 0x4, 0x0, {0x4, 0x1, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ustat(0x10b, &(0x7f0000000180)) getsockopt$inet_mreq(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @multicast1}, &(0x7f0000000140)=0x8) 22:26:03 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a00000029010000000000000000000000000000000000000000000000000000"], 0x20) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:03 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000), 0x4) pwrite64(r0, &(0x7f0000000040)="6c38ce45f1a1cb96f960ef6ea75f8c0251135c419bf15a85cce78ed68f9218dd769c0e1075a3dc20be86c94e24a2928b7533a8aa3acc59f145847c5a950684d9eb186bd6c8dfd07661d82b1c10a8b16aa5293986a421a5cea16193aae4cafa0993590571bba80d6c", 0x68, 0x0) 22:26:03 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000), 0x4) 22:26:03 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 328.799016] RAX: ffffffffffffffda RBX: 00007fe586f25c90 RCX: 0000000000457579 [ 328.799024] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 328.799032] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 328.799042] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe586f266d4 [ 328.799050] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:04 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockname(r0, &(0x7f0000000040)=@nl, &(0x7f00000000c0)=0x80) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000), 0x4) 22:26:04 executing program 2 (fault-call:15 fault-nth:1): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:04 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x84804) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x2840) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x100000000) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r2) 22:26:04 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x13) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:04 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f"], 0x25) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:04 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:04 executing program 5: r0 = socket$inet(0x2, 0x4, 0x411) fstatfs(r0, &(0x7f0000000040)=""/112) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000000), 0x4) 22:26:04 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c"], 0x28) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:04 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x84804) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x2840) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x100000000) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) close(r2) [ 329.122630] FAULT_INJECTION: forcing a failure. [ 329.122630] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 329.134494] CPU: 1 PID: 12678 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #264 [ 329.141871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.151234] Call Trace: [ 329.151263] dump_stack+0x1c4/0x2b4 [ 329.151288] ? dump_stack_print_info.cold.2+0x52/0x52 [ 329.151310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.151341] should_fail.cold.4+0xa/0x17 [ 329.168251] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 329.168272] ? __lock_acquire+0x7ec/0x4ec0 [ 329.168287] ? __switch_to_asm+0x40/0x70 [ 329.168299] ? __switch_to_asm+0x34/0x70 [ 329.168317] ? __switch_to_asm+0x34/0x70 [ 329.185749] ? mark_held_locks+0x130/0x130 [ 329.185771] ? mark_held_locks+0x130/0x130 [ 329.185790] ? print_usage_bug+0xc0/0xc0 [ 329.206405] ? graph_lock+0x170/0x170 [ 329.210222] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.215767] ? should_fail+0x22d/0xd01 [ 329.219667] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 329.224787] ? __lock_acquire+0x7ec/0x4ec0 [ 329.229046] __alloc_pages_nodemask+0x34b/0xde0 [ 329.233835] ? _parse_integer+0x134/0x180 [ 329.238005] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 329.243067] ? _parse_integer+0x180/0x180 [ 329.247238] ? find_held_lock+0x36/0x1c0 [ 329.251334] ? ___might_sleep+0x1ed/0x300 [ 329.255496] ? trace_hardirqs_off+0xb8/0x310 [ 329.259947] cache_grow_begin+0x91/0x8c0 [ 329.264026] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 329.269594] ? check_preemption_disabled+0x48/0x200 [ 329.274642] kmem_cache_alloc+0x665/0x730 [ 329.278364] FS-Cache: Duplicate cookie detected [ 329.278826] ? lock_downgrade+0x900/0x900 [ 329.283551] FS-Cache: O-cookie c=00000000aba15e25 [p=00000000845ed810 fl=222 nc=0 na=1] [ 329.287644] getname_flags+0xd0/0x5a0 [ 329.295843] FS-Cache: O-cookie d=00000000b0f58035 n=00000000ab7514c4 [ 329.299571] do_renameat2+0x319/0x1180 [ 329.299586] ? find_held_lock+0x36/0x1c0 [ 329.299604] ? kasan_check_write+0x14/0x20 [ 329.299627] ? wait_for_completion+0x8a0/0x8a0 [ 329.306100] FS-Cache: O-key=[10] ' [ 329.309989] ? user_path_create+0x40/0x40 [ 329.310005] ? __lock_is_held+0xb5/0x140 [ 329.310026] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.314085] 34 [ 329.318316] ? check_preemption_disabled+0x48/0x200 [ 329.318336] ? __sb_end_write+0xd9/0x110 [ 329.318356] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 329.318371] ? fput+0x130/0x1a0 [ 329.322999] 32 [ 329.326491] ? do_syscall_64+0x9a/0x820 [ 329.330665] 39 [ 329.334680] ? do_syscall_64+0x9a/0x820 [ 329.340244] 34 22:26:04 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/fscreate\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x100000000000031, r0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x800) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x0, &(0x7f0000000100), 0x4) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)=0x81) 22:26:04 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:04 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, &(0x7f0000000040)="b95e6e4d616df24df943a9adaf0599a922277de0a58db1dc23f8d76a642ff9deec281c48a3804f1fe248d2c942427635e59f8bc1521e076e12eff4dd542a99d41a", 0x41, 0x40, &(0x7f00000000c0)={0x1a, 0x1, 0x7, 0x4, 0x7, 0x9fc, @broadcast}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000), 0x4) 22:26:04 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x80, 0x1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="29e2fbe3d8fe77ea96cf67be4f9d82d349fe788f48da13ad8ace2abd20192fa34b0a092115eaaa4004329c762fe44221d6a31d520b4a39f9b9ea50ee956b33dfbb56d12400efb973480ff2d8f361355b94cf7137626ed46bbc38757038588c374976eba29ca760e8c0b6c8cd6821664888ebc3493f8bcb1935fbcd99a23a516441ea93943ce56ba80f85722523d769b87aab7c390ef50b95d6e4097a5097f29b02f06e52509184750860fc904ad1e44a9687b2012dc6076fba367446751cd97aa5e1bf29672bfe90afec5292c1e169d9c509d948add7f0d358a80f", 0xdb, 0x8}], 0x20001, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) [ 329.341992] ? lockdep_hardirqs_on+0x421/0x5c0 [ 329.346979] 39 [ 329.351068] ? trace_hardirqs_on+0xbd/0x310 [ 329.351083] ? __ia32_sys_read+0xb0/0xb0 [ 329.351098] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 329.351115] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 329.351138] __x64_sys_rename+0x5e/0x80 [ 329.356668] 37 [ 329.359951] do_syscall_64+0x1b9/0x820 [ 329.359966] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 329.359982] ? syscall_return_slowpath+0x5e0/0x5e0 [ 329.359997] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.360016] ? trace_hardirqs_on_caller+0x310/0x310 [ 329.361799] 30 [ 329.366307] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 329.368129] 30 [ 329.372051] ? prepare_exit_to_usermode+0x291/0x3b0 [ 329.373826] 36 [ 329.378408] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.378430] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 329.378442] RIP: 0033:0x457579 [ 329.378459] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 329.380243] 33 [ 329.384553] RSP: 002b:00007fe586f25c78 EFLAGS: 00000246 [ 329.388643] ' [ 329.393937] ORIG_RAX: 0000000000000052 [ 329.393952] RAX: ffffffffffffffda RBX: 00007fe586f25c90 RCX: 0000000000457579 [ 329.399459] FS-Cache: N-cookie c=000000000de9b509 [p=00000000845ed810 fl=2 nc=0 na=1] [ 329.403358] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 329.405155] FS-Cache: N-cookie d=00000000b0f58035 n=0000000056bea395 22:26:04 executing program 2 (fault-call:15 fault-nth:2): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:04 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x84804) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x2840) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x100000000) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) close(r2) [ 329.409018] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 329.409026] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe586f266d4 [ 329.409040] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 [ 329.541780] FS-Cache: N-key=[10] '34323934393730303633' 22:26:04 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000), 0xffffffffffffff1e) sendfile(r0, r0, &(0x7f0000000040), 0xe6) 22:26:04 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c65"], 0x29) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:04 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x84804) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x2840) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x100000000) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) close(r2) 22:26:04 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:04 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x84804) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x2840) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x100000000) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) close(r2) [ 329.763927] FAULT_INJECTION: forcing a failure. [ 329.763927] name failslab, interval 1, probability 0, space 0, times 0 [ 329.791174] CPU: 0 PID: 12716 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #264 [ 329.798617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.798626] Call Trace: [ 329.798660] dump_stack+0x1c4/0x2b4 [ 329.798686] ? dump_stack_print_info.cold.2+0x52/0x52 [ 329.798707] ? find_held_lock+0x36/0x1c0 [ 329.798735] should_fail.cold.4+0xa/0x17 [ 329.827635] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 329.832803] ? unlazy_walk+0x1b8/0x550 [ 329.836728] ? graph_lock+0x170/0x170 [ 329.840567] ? lock_downgrade+0x900/0x900 [ 329.844774] ? check_preemption_disabled+0x48/0x200 [ 329.849812] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 329.849826] ? kasan_check_read+0x11/0x20 [ 329.849841] ? dput.part.26+0x26d/0x790 [ 329.849863] ? find_held_lock+0x36/0x1c0 [ 329.849900] ? ___might_sleep+0x1ed/0x300 [ 329.849917] ? arch_local_save_flags+0x40/0x40 [ 329.849931] ? filename_parentat.isra.56+0x424/0x570 [ 329.849949] ? getname+0x20/0x20 [ 329.859994] __should_failslab+0x124/0x180 [ 329.860013] should_failslab+0x9/0x14 [ 329.860035] kmem_cache_alloc+0x2be/0x730 [ 329.868076] getname_flags+0xd0/0x5a0 [ 329.868095] do_renameat2+0x37d/0x1180 [ 329.868108] ? find_held_lock+0x36/0x1c0 [ 329.868125] ? kasan_check_write+0x14/0x20 22:26:05 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x84804) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x2840) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x100000000) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r2) 22:26:05 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x40, 0x101040) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x20, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}], [{@smackfshat={'smackfshat', 0x3d, 'trustedvmnet1]{.vmnet1'}}, {@subj_type={'subj_type', 0x3d, 'em0systemsecurityeth0ð0(posix_acl_accessmime_type'}}]}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r5, 0x80487436, &(0x7f0000000040)={0x1fffd}) [ 329.868158] ? wait_for_completion+0x8a0/0x8a0 [ 329.868176] ? user_path_create+0x40/0x40 [ 329.913447] ? __lock_is_held+0xb5/0x140 [ 329.922183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.922204] ? check_preemption_disabled+0x48/0x200 [ 329.922235] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 329.922252] ? fput+0x130/0x1a0 [ 329.945648] ? do_syscall_64+0x9a/0x820 [ 329.949638] ? do_syscall_64+0x9a/0x820 [ 329.953630] ? trace_hardirqs_on+0xbd/0x310 [ 329.957969] ? __ia32_sys_read+0xb0/0xb0 [ 329.962042] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 329.967421] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 329.972887] __x64_sys_rename+0x5e/0x80 [ 329.976888] do_syscall_64+0x1b9/0x820 [ 329.980798] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 329.986191] ? syscall_return_slowpath+0x5e0/0x5e0 [ 329.991160] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.996026] ? trace_hardirqs_on_caller+0x310/0x310 [ 330.001057] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 330.006084] ? prepare_exit_to_usermode+0x291/0x3b0 [ 330.011120] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.015993] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 330.021211] RIP: 0033:0x457579 [ 330.024413] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 330.043359] RSP: 002b:00007fe586f25c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 330.051090] RAX: ffffffffffffffda RBX: 00007fe586f25c90 RCX: 0000000000457579 [ 330.058369] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 330.065648] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 330.072954] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe586f266d4 [ 330.080231] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:05 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:05 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x84804) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x2840) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x100000000) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r2) 22:26:05 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x84804) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x2840) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x100000000) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) close(r2) 22:26:05 executing program 2 (fault-call:15 fault-nth:3): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:05 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:05 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfb2d, 0x1e4bdf0453a8375a) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000100)={r4, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f00000001c0)=0x84) 22:26:05 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x84804) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x2840) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x100000000) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r2) 22:26:05 executing program 5 (fault-call:8 fault-nth:0): r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:05 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x84804) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x2840) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x100000000) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) close(0xffffffffffffffff) 22:26:05 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:05 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:05 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:05 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd, 0x0, 0xea}) [ 330.529558] FAULT_INJECTION: forcing a failure. [ 330.529558] name failslab, interval 1, probability 0, space 0, times 0 [ 330.578239] CPU: 1 PID: 12764 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #264 [ 330.585661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.595037] Call Trace: [ 330.597652] dump_stack+0x1c4/0x2b4 [ 330.601303] ? dump_stack_print_info.cold.2+0x52/0x52 [ 330.606521] ? kernel_text_address+0x79/0xf0 [ 330.610957] ? __kernel_text_address+0xd/0x40 [ 330.615502] should_fail.cold.4+0xa/0x17 [ 330.619602] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 330.624737] ? __lock_acquire+0x7ec/0x4ec0 [ 330.628997] ? graph_lock+0x170/0x170 [ 330.632826] ? save_stack+0x43/0xd0 [ 330.636472] ? kasan_kmalloc+0xc7/0xe0 [ 330.640413] ? graph_lock+0x170/0x170 [ 330.644247] ? d_alloc+0x96/0x380 [ 330.647721] ? graph_lock+0x170/0x170 [ 330.651545] ? find_held_lock+0x36/0x1c0 [ 330.655621] ? __lock_is_held+0xb5/0x140 [ 330.659710] ? ___might_sleep+0x1ed/0x300 [ 330.663958] ? v9fs_fid_find+0x24b/0x2f0 [ 330.668042] ? arch_local_save_flags+0x40/0x40 [ 330.672639] ? lock_downgrade+0x900/0x900 [ 330.676815] __should_failslab+0x124/0x180 [ 330.681067] should_failslab+0x9/0x14 [ 330.684877] kmem_cache_alloc_trace+0x2d7/0x750 [ 330.689966] ? do_raw_spin_lock+0xc1/0x200 [ 330.694286] p9_fid_create+0x49/0x2b0 [ 330.698138] p9_client_walk+0x124/0xb30 [ 330.702161] ? __update_load_avg_se+0x311/0xb90 [ 330.706868] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 330.712527] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 330.718000] ? d_alloc+0x28b/0x380 [ 330.721566] ? lock_downgrade+0x86c/0x900 [ 330.725787] ? v9fs_fid_add+0x240/0x240 [ 330.729786] ? kasan_check_read+0x11/0x20 [ 330.733949] ? do_raw_spin_unlock+0xa7/0x2f0 [ 330.738373] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 330.742984] v9fs_vfs_lookup+0x1f7/0x4a0 [ 330.747061] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 330.751308] ? d_alloc+0x290/0x380 [ 330.754867] ? v9fs_vfs_create+0x130/0x130 [ 330.759110] ? lock_rename+0x236/0x290 [ 330.763039] __lookup_hash+0x12e/0x190 [ 330.766945] do_renameat2+0x6c1/0x1180 [ 330.770871] ? user_path_create+0x40/0x40 [ 330.775035] ? __lock_is_held+0xb5/0x140 [ 330.779120] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 330.784683] ? check_preemption_disabled+0x48/0x200 [ 330.789736] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 330.795291] ? do_syscall_64+0x9a/0x820 [ 330.799278] ? do_syscall_64+0x9a/0x820 [ 330.803267] ? trace_hardirqs_on+0xbd/0x310 [ 330.807597] ? __ia32_sys_read+0xb0/0xb0 [ 330.811675] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 330.817055] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 330.823078] __x64_sys_rename+0x5e/0x80 [ 330.827071] do_syscall_64+0x1b9/0x820 [ 330.830969] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 330.836355] ? syscall_return_slowpath+0x5e0/0x5e0 [ 330.841297] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.846178] ? trace_hardirqs_on_caller+0x310/0x310 [ 330.851208] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 330.856258] ? prepare_exit_to_usermode+0x291/0x3b0 [ 330.861301] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.866177] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 330.871387] RIP: 0033:0x457579 [ 330.874593] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 330.893514] RSP: 002b:00007fe586f25c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 330.901269] RAX: ffffffffffffffda RBX: 00007fe586f25c90 RCX: 0000000000457579 [ 330.908545] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 330.915826] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 22:26:06 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) r1 = memfd_create(&(0x7f0000000080)='proc\x00', 0x6) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r3) 22:26:06 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x84804) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x2840) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x100000000) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r2) [ 330.923104] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe586f266d4 [ 330.930394] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:06 executing program 2 (fault-call:15 fault-nth:4): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:06 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:06 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:06 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:06 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x84804) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x2840) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:06 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x2, 0x118843) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:06 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x84804) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:06 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:06 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[], 0x0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:06 executing program 0: mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)={0x0, @speck128, 0x0, "65c1f4743b6b6b19"}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x220000, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x16) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0xffffffb4) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x80, 0x0) connect$l2tp(r5, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @loopback}, 0x3, 0x0, 0x4, 0x2}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r4, 0x80487436, &(0x7f0000000040)={0x1fffd}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/214, &(0x7f0000000280)=0xd6) 22:26:06 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) [ 331.253218] FAULT_INJECTION: forcing a failure. [ 331.253218] name failslab, interval 1, probability 0, space 0, times 0 [ 331.344689] CPU: 0 PID: 12804 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #264 [ 331.352119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.361501] Call Trace: [ 331.364115] dump_stack+0x1c4/0x2b4 [ 331.367774] ? dump_stack_print_info.cold.2+0x52/0x52 [ 331.372975] ? print_usage_bug+0xc0/0xc0 [ 331.373006] should_fail.cold.4+0xa/0x17 [ 331.381132] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 331.386261] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.391808] ? walk_component+0x3fe/0x25c0 [ 331.396053] ? graph_lock+0x170/0x170 [ 331.399862] ? graph_lock+0x170/0x170 [ 331.399877] ? mark_held_locks+0x130/0x130 [ 331.399899] ? find_held_lock+0x36/0x1c0 [ 331.399918] ? __lock_is_held+0xb5/0x140 [ 331.399946] ? ___might_sleep+0x1ed/0x300 [ 331.399965] ? arch_local_save_flags+0x40/0x40 [ 331.425279] __should_failslab+0x124/0x180 [ 331.429540] should_failslab+0x9/0x14 [ 331.433357] kmem_cache_alloc+0x2be/0x730 [ 331.437524] __d_alloc+0xc8/0xcc0 22:26:06 executing program 4: socket$inet6(0xa, 0x80003, 0x800000000000006) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close(r0) [ 331.441005] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 331.446039] ? d_alloc_parallel+0x1f40/0x1f40 [ 331.450550] ? d_lookup+0x269/0x340 [ 331.454186] ? d_lookup+0x269/0x340 [ 331.457828] ? lockdep_hardirqs_on+0x421/0x5c0 [ 331.462425] ? lock_rename+0x236/0x290 [ 331.466325] ? lookup_dcache+0x22/0x140 [ 331.470318] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 331.475787] ? lock_release+0x970/0x970 [ 331.479774] ? arch_local_save_flags+0x40/0x40 [ 331.484373] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 331.489408] d_alloc+0x96/0x380 [ 331.492697] ? __d_lookup+0x9e0/0x9e0 [ 331.496510] ? __d_alloc+0xcc0/0xcc0 [ 331.500244] ? lock_rename+0x236/0x290 [ 331.504167] __lookup_hash+0xd9/0x190 [ 331.507985] do_renameat2+0x6c1/0x1180 [ 331.511903] ? user_path_create+0x40/0x40 [ 331.516069] ? __lock_is_held+0xb5/0x140 [ 331.520156] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.525712] ? check_preemption_disabled+0x48/0x200 [ 331.530760] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 331.536313] ? do_syscall_64+0x9a/0x820 [ 331.540296] ? do_syscall_64+0x9a/0x820 [ 331.544286] ? trace_hardirqs_on+0xbd/0x310 [ 331.548621] ? __ia32_sys_read+0xb0/0xb0 [ 331.552698] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 331.558072] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 331.558097] __x64_sys_rename+0x5e/0x80 [ 331.558116] do_syscall_64+0x1b9/0x820 [ 331.558132] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 331.558164] ? syscall_return_slowpath+0x5e0/0x5e0 [ 331.567582] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.586581] ? trace_hardirqs_on_caller+0x310/0x310 [ 331.591625] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 331.596663] ? prepare_exit_to_usermode+0x291/0x3b0 [ 331.601724] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.606579] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 331.611758] RIP: 0033:0x457579 [ 331.614937] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 331.633829] RSP: 002b:00007fe586f25c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 22:26:06 executing program 2 (fault-call:15 fault-nth:5): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:06 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:06 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:06 executing program 4: socket$inet6(0xa, 0x80003, 0x800000000000006) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close(r0) 22:26:06 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x2, 0x3, 0x0, {0xa, 0x4e23, 0x15, @mcast2, 0xffffffff}}}, 0x32) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x3, 0x3, 0x3, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0x18}, 0x9}}}, 0xffffffffffffff63) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.impure\x00') ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:06 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) [ 331.641590] RAX: ffffffffffffffda RBX: 00007fe586f25c90 RCX: 0000000000457579 [ 331.648859] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 331.656123] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 331.663393] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe586f266d4 [ 331.670739] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:06 executing program 4: socket$inet6(0xa, 0x80003, 0x800000000000006) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close(r0) 22:26:06 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:06 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000"], 0xb) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 331.863570] FAULT_INJECTION: forcing a failure. [ 331.863570] name failslab, interval 1, probability 0, space 0, times 0 [ 331.875142] CPU: 0 PID: 12842 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #264 [ 331.882525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.891896] Call Trace: [ 331.894508] dump_stack+0x1c4/0x2b4 [ 331.898185] ? dump_stack_print_info.cold.2+0x52/0x52 [ 331.903409] should_fail.cold.4+0xa/0x17 [ 331.907487] ? fault_create_debugfs_attr+0x1f0/0x1f0 22:26:07 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xc2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) [ 331.912606] ? check_noncircular+0x20/0x20 [ 331.916853] ? print_usage_bug+0xc0/0xc0 [ 331.920926] ? attach_entity_load_avg+0x860/0x860 [ 331.920954] ? graph_lock+0x170/0x170 [ 331.920980] ? print_usage_bug+0xc0/0xc0 [ 331.920997] ? __lock_acquire+0x7ec/0x4ec0 [ 331.921017] ? graph_lock+0x170/0x170 [ 331.921031] ? graph_lock+0x170/0x170 [ 331.921054] ? print_usage_bug+0xc0/0xc0 [ 331.949668] __should_failslab+0x124/0x180 [ 331.953927] should_failslab+0x9/0x14 [ 331.957756] kmem_cache_alloc+0x47/0x730 22:26:07 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x800) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000140)={{0x10000000002, 0x1, 0x10001, 0x3}}) modify_ldt$write2(0x11, &(0x7f0000000080)={0x6de, 0xffffffffffffffff, 0x400, 0x6, 0xe2ed, 0x7, 0x80000001, 0x7ff, 0x80000000, 0x200}, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) close(r3) [ 331.961847] radix_tree_node_alloc.constprop.18+0x1f7/0x370 [ 331.967582] radix_tree_extend+0x294/0x660 [ 331.971843] ? radix_tree_node_alloc.constprop.18+0x370/0x370 [ 331.971861] ? kernel_text_address+0x79/0xf0 [ 331.971883] ? __kernel_text_address+0xd/0x40 [ 331.971898] ? unwind_get_return_address+0x61/0xa0 [ 331.971922] ? __save_stack_trace+0x8d/0xf0 [ 331.971942] idr_get_free+0x83d/0xec0 [ 331.999783] ? ida_pre_get+0x130/0x130 [ 332.003728] ? do_renameat2+0x6c1/0x1180 [ 332.007800] ? do_syscall_64+0x1b9/0x820 [ 332.011875] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 332.017289] ? graph_lock+0x170/0x170 [ 332.021109] ? find_held_lock+0x36/0x1c0 [ 332.025193] ? graph_lock+0x170/0x170 [ 332.029007] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 332.034563] ? check_preemption_disabled+0x48/0x200 [ 332.039596] ? check_preemption_disabled+0x48/0x200 [ 332.044639] ? lock_acquire+0x1ed/0x520 [ 332.048640] ? p9_fid_create+0x1bc/0x2b0 [ 332.052730] idr_alloc_u32+0x201/0x3f0 [ 332.056644] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 332.061498] ? trace_hardirqs_on+0x310/0x310 [ 332.065926] ? kasan_check_write+0x14/0x20 [ 332.070180] ? do_raw_spin_lock+0xc1/0x200 [ 332.074438] p9_fid_create+0x1d7/0x2b0 [ 332.078340] p9_client_walk+0x124/0xb30 [ 332.082328] ? __update_load_avg_se+0x311/0xb90 [ 332.087015] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 332.092688] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 332.097736] ? d_alloc+0x28b/0x380 [ 332.101292] ? lock_downgrade+0x86c/0x900 [ 332.105456] ? v9fs_fid_add+0x240/0x240 [ 332.109445] ? kasan_check_read+0x11/0x20 [ 332.113622] ? do_raw_spin_unlock+0xa7/0x2f0 [ 332.118052] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 332.122667] v9fs_vfs_lookup+0x1f7/0x4a0 [ 332.126742] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 332.130984] ? d_alloc+0x290/0x380 [ 332.134548] ? v9fs_vfs_create+0x130/0x130 [ 332.138790] ? lock_rename+0x236/0x290 [ 332.142701] __lookup_hash+0x12e/0x190 [ 332.146605] do_renameat2+0x6c1/0x1180 [ 332.150525] ? user_path_create+0x40/0x40 [ 332.154692] ? __lock_is_held+0xb5/0x140 [ 332.158770] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 332.164316] ? check_preemption_disabled+0x48/0x200 [ 332.169367] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 332.174917] ? do_syscall_64+0x9a/0x820 [ 332.178899] ? do_syscall_64+0x9a/0x820 [ 332.182886] ? trace_hardirqs_on+0xbd/0x310 [ 332.187216] ? __ia32_sys_read+0xb0/0xb0 [ 332.191288] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 332.196662] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 332.202130] __x64_sys_rename+0x5e/0x80 [ 332.206132] do_syscall_64+0x1b9/0x820 [ 332.210038] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 332.215449] ? syscall_return_slowpath+0x5e0/0x5e0 [ 332.220416] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.225282] ? trace_hardirqs_on_caller+0x310/0x310 [ 332.230312] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 332.235342] ? prepare_exit_to_usermode+0x291/0x3b0 [ 332.240376] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.245239] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 332.250435] RIP: 0033:0x457579 [ 332.253638] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 332.272576] RSP: 002b:00007fe586f25c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 332.280310] RAX: ffffffffffffffda RBX: 00007fe586f25c90 RCX: 0000000000457579 [ 332.287608] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 332.294897] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 332.302177] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe586f266d4 22:26:07 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close(r0) [ 332.309484] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:07 executing program 2 (fault-call:15 fault-nth:6): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:07 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x5f, 0x2, 0x0, "87f674b85d5bc86509d881f19f1bbfc7", "929dd37ab4848aa73d44560a5a1915124242ade46ede884aabb867c795591ef5334d749ddaf74ace769a8c731436001e93d3a5e126ad7d67a4d00f4aea3175e022e54956c3da1ddfd57f"}, 0x5f, 0x1) preadv(r2, &(0x7f0000000480), 0x20000000000002af, 0x7ffffffff000) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r3) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r4, 0xc18, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x29}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x41}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfaf}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x629552a9296f8b70}, 0x91) 22:26:07 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000000000000000"], 0x11) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:07 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close(r0) 22:26:07 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:07 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close(r0) 22:26:07 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000000000000000000000"], 0x14) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:07 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:07 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9199, 0x8100) getpeername$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000100)) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) [ 332.712846] FAULT_INJECTION: forcing a failure. [ 332.712846] name failslab, interval 1, probability 0, space 0, times 0 [ 332.724094] CPU: 0 PID: 12885 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #264 [ 332.731466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.740840] Call Trace: [ 332.743461] dump_stack+0x1c4/0x2b4 [ 332.747126] ? dump_stack_print_info.cold.2+0x52/0x52 [ 332.752346] ? find_held_lock+0x36/0x1c0 [ 332.752380] should_fail.cold.4+0xa/0x17 [ 332.752404] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 332.760521] ? check_noncircular+0x20/0x20 [ 332.760550] ? print_usage_bug+0xc0/0xc0 [ 332.760572] ? ima_match_policy+0x848/0x1560 [ 332.769901] ? graph_lock+0x170/0x170 [ 332.778370] ? print_usage_bug+0xc0/0xc0 [ 332.778388] ? __lock_acquire+0x7ec/0x4ec0 [ 332.778409] ? graph_lock+0x170/0x170 [ 332.778423] ? graph_lock+0x170/0x170 [ 332.778445] ? print_usage_bug+0xc0/0xc0 [ 332.778471] __should_failslab+0x124/0x180 [ 332.806428] should_failslab+0x9/0x14 [ 332.810248] kmem_cache_alloc+0x47/0x730 [ 332.814341] radix_tree_node_alloc.constprop.18+0x1f7/0x370 [ 332.820567] radix_tree_extend+0x294/0x660 [ 332.824826] ? radix_tree_node_alloc.constprop.18+0x370/0x370 [ 332.830728] ? kernel_text_address+0x79/0xf0 [ 332.835157] ? __kernel_text_address+0xd/0x40 [ 332.839665] ? unwind_get_return_address+0x61/0xa0 [ 332.844609] ? __save_stack_trace+0x8d/0xf0 [ 332.848991] idr_get_free+0x83d/0xec0 [ 332.852829] ? ida_pre_get+0x130/0x130 [ 332.856720] ? do_renameat2+0x6c1/0x1180 [ 332.860795] ? do_syscall_64+0x1b9/0x820 [ 332.864865] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 332.870238] ? graph_lock+0x170/0x170 [ 332.874061] ? find_held_lock+0x36/0x1c0 [ 332.878138] ? graph_lock+0x170/0x170 [ 332.881965] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 332.887521] ? check_preemption_disabled+0x48/0x200 [ 332.892558] ? check_preemption_disabled+0x48/0x200 [ 332.897599] ? lock_acquire+0x1ed/0x520 [ 332.901602] ? p9_fid_create+0x1bc/0x2b0 [ 332.905692] idr_alloc_u32+0x201/0x3f0 [ 332.909600] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 332.914461] ? trace_hardirqs_on+0x310/0x310 [ 332.918893] ? kasan_check_write+0x14/0x20 [ 332.923164] ? do_raw_spin_lock+0xc1/0x200 [ 332.927431] p9_fid_create+0x1d7/0x2b0 [ 332.931338] p9_client_walk+0x124/0xb30 [ 332.935326] ? __update_load_avg_se+0x311/0xb90 [ 332.940023] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 332.945661] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 332.950685] ? d_alloc+0x28b/0x380 [ 332.954242] ? lock_downgrade+0x86c/0x900 [ 332.958403] ? v9fs_fid_add+0x240/0x240 [ 332.962389] ? kasan_check_read+0x11/0x20 [ 332.966554] ? do_raw_spin_unlock+0xa7/0x2f0 [ 332.970973] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 332.975587] v9fs_vfs_lookup+0x1f7/0x4a0 [ 332.979671] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 332.983911] ? d_alloc+0x290/0x380 [ 332.987467] ? v9fs_vfs_create+0x130/0x130 [ 332.991708] ? lock_rename+0x236/0x290 [ 332.995622] __lookup_hash+0x12e/0x190 [ 332.999528] do_renameat2+0x6c1/0x1180 [ 333.003462] ? user_path_create+0x40/0x40 [ 333.007628] ? __lock_is_held+0xb5/0x140 [ 333.011731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 333.017306] ? check_preemption_disabled+0x48/0x200 [ 333.022359] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 333.027916] ? do_syscall_64+0x9a/0x820 [ 333.031908] ? do_syscall_64+0x9a/0x820 [ 333.035899] ? trace_hardirqs_on+0xbd/0x310 [ 333.040229] ? __ia32_sys_read+0xb0/0xb0 [ 333.044305] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 333.049685] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 333.055169] __x64_sys_rename+0x5e/0x80 [ 333.059171] do_syscall_64+0x1b9/0x820 [ 333.063070] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 333.068445] ? syscall_return_slowpath+0x5e0/0x5e0 [ 333.073381] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.078242] ? trace_hardirqs_on_caller+0x310/0x310 [ 333.083275] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 333.088307] ? prepare_exit_to_usermode+0x291/0x3b0 [ 333.093351] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.098226] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 333.103420] RIP: 0033:0x457579 [ 333.106623] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 333.125540] RSP: 002b:00007fe586f25c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 333.133266] RAX: ffffffffffffffda RBX: 00007fe586f25c90 RCX: 0000000000457579 [ 333.140567] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 333.147851] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 333.155134] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe586f266d4 [ 333.162423] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:08 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:08 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f01000100000000000000000000000000"], 0x15) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:08 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:08 executing program 2 (fault-call:15 fault-nth:7): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 333.568699] FAULT_INJECTION: forcing a failure. [ 333.568699] name failslab, interval 1, probability 0, space 0, times 0 [ 333.580252] CPU: 0 PID: 12919 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #264 [ 333.587626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.597002] Call Trace: [ 333.599623] dump_stack+0x1c4/0x2b4 [ 333.603288] ? dump_stack_print_info.cold.2+0x52/0x52 [ 333.608507] should_fail.cold.4+0xa/0x17 [ 333.612626] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 333.617751] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 333.623316] ? trace_hardirqs_on+0x310/0x310 [ 333.627765] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 333.633336] ? get_page_from_freelist+0x488b/0x5340 [ 333.638387] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 333.643957] ? graph_lock+0x170/0x170 [ 333.647820] __should_failslab+0x124/0x180 [ 333.652085] should_failslab+0x9/0x14 [ 333.655901] kmem_cache_alloc+0x47/0x730 [ 333.659977] ? print_usage_bug+0xc0/0xc0 [ 333.664049] ? lock_downgrade+0x900/0x900 [ 333.668215] ? check_preemption_disabled+0x48/0x200 [ 333.673262] radix_tree_node_alloc.constprop.18+0x1f7/0x370 [ 333.679004] radix_tree_extend+0x294/0x660 [ 333.683265] ? radix_tree_node_alloc.constprop.18+0x370/0x370 [ 333.689180] ? __kernel_text_address+0xd/0x40 [ 333.693690] ? unwind_get_return_address+0x61/0xa0 [ 333.698655] idr_get_free+0x83d/0xec0 [ 333.702478] ? save_stack+0xa9/0xd0 [ 333.706131] ? ida_pre_get+0x130/0x130 [ 333.710043] ? p9_client_walk+0x124/0xb30 [ 333.714230] ? __lookup_hash+0x12e/0x190 [ 333.718313] ? do_renameat2+0x6c1/0x1180 [ 333.722387] ? __x64_sys_rename+0x5e/0x80 [ 333.726552] ? do_syscall_64+0x1b9/0x820 [ 333.730630] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 333.736030] ? print_usage_bug+0xc0/0xc0 [ 333.740112] ? __lock_acquire+0x7ec/0x4ec0 [ 333.744371] ? graph_lock+0x170/0x170 [ 333.748196] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 333.753750] ? check_preemption_disabled+0x48/0x200 [ 333.758790] ? check_preemption_disabled+0x48/0x200 [ 333.763857] idr_alloc_u32+0x201/0x3f0 [ 333.767769] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 333.772679] ? p9_idpool_get+0x23/0x90 [ 333.776591] idr_alloc+0x111/0x1b0 [ 333.780161] ? idr_alloc_u32+0x3f0/0x3f0 [ 333.784248] ? do_raw_spin_lock+0xc1/0x200 [ 333.788520] p9_idpool_get+0x3d/0x90 [ 333.792265] p9_client_prepare_req.part.8+0xec/0xc30 [ 333.797390] ? delete_node+0x30e/0xd20 [ 333.801298] ? unwind_get_return_address+0x61/0xa0 [ 333.806261] ? p9_free_req.isra.7+0x140/0x140 [ 333.810768] ? idr_destroy+0x1c0/0x1c0 [ 333.814685] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 333.820500] ? replace_slot+0x151/0x520 [ 333.824504] p9_client_rpc+0x1c2/0x1480 [ 333.828677] ? radix_tree_descend+0x2e0/0x2e0 [ 333.833207] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 333.838586] ? find_held_lock+0x36/0x1c0 [ 333.842676] ? find_held_lock+0x36/0x1c0 [ 333.846758] ? mark_held_locks+0xc7/0x130 [ 333.850919] ? _raw_spin_unlock_irq+0x27/0x80 [ 333.855435] ? _raw_spin_unlock_irq+0x27/0x80 [ 333.859943] ? lockdep_hardirqs_on+0x421/0x5c0 [ 333.864540] ? trace_hardirqs_on+0xbd/0x310 [ 333.868867] ? kasan_check_read+0x11/0x20 [ 333.873023] ? p9_fid_create+0x1e2/0x2b0 [ 333.877106] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 333.882581] ? kasan_check_write+0x14/0x20 [ 333.886832] ? do_raw_spin_lock+0xc1/0x200 [ 333.891098] p9_client_walk+0x208/0xb30 [ 333.895087] ? __update_load_avg_se+0x311/0xb90 [ 333.899783] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 333.905440] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 333.910469] ? d_alloc+0x28b/0x380 [ 333.914025] ? lock_downgrade+0x86c/0x900 [ 333.918198] ? v9fs_fid_add+0x240/0x240 [ 333.922194] ? kasan_check_read+0x11/0x20 [ 333.926355] ? do_raw_spin_unlock+0xa7/0x2f0 [ 333.930777] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 333.935395] v9fs_vfs_lookup+0x1f7/0x4a0 [ 333.939473] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 333.943715] ? d_alloc+0x290/0x380 [ 333.947274] ? v9fs_vfs_create+0x130/0x130 [ 333.951517] ? lock_rename+0x236/0x290 [ 333.955431] __lookup_hash+0x12e/0x190 [ 333.959333] do_renameat2+0x6c1/0x1180 [ 333.963247] ? user_path_create+0x40/0x40 [ 333.967408] ? __lock_is_held+0xb5/0x140 [ 333.971483] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 333.977031] ? check_preemption_disabled+0x48/0x200 [ 333.982076] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 333.987640] ? do_syscall_64+0x9a/0x820 [ 333.991624] ? do_syscall_64+0x9a/0x820 [ 333.995616] ? trace_hardirqs_on+0xbd/0x310 [ 333.999946] ? __ia32_sys_read+0xb0/0xb0 [ 334.004013] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 334.009389] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 334.014858] __x64_sys_rename+0x5e/0x80 22:26:09 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:09 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:09 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:09 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:09 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_ifreq(r2, 0x8917, &(0x7f0000000080)={'gretap0\x00', @ifru_data=&(0x7f0000000000)="b1e4681cc632ba53e68e96492a6f8c62991c0272e49778804960f0cc8b2349ee"}) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) [ 334.018845] do_syscall_64+0x1b9/0x820 [ 334.022748] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 334.028143] ? syscall_return_slowpath+0x5e0/0x5e0 [ 334.033098] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.033129] ? trace_hardirqs_on_caller+0x310/0x310 [ 334.033160] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 334.048043] ? prepare_exit_to_usermode+0x291/0x3b0 [ 334.053092] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.058060] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 334.063259] RIP: 0033:0x457579 [ 334.063276] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 334.063285] RSP: 002b:00007fe586f25c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 334.063303] RAX: ffffffffffffffda RBX: 00007fe586f25c90 RCX: 0000000000457579 [ 334.063312] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 334.063322] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 334.063332] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe586f266d4 [ 334.063346] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:09 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x0, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:09 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:09 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:09 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000001040)=""/4096) r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x80280) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f00000000c0)=[{}], 0x0, [{}, {}, {}, {}]}, 0xb8) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3, 0x0, 0x0, 0x0, 0x6}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:09 executing program 2 (fault-call:15 fault-nth:8): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:09 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) memfd_create(&(0x7f0000000000)='@\\cpuset\x00', 0x3) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:09 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 334.436284] FAULT_INJECTION: forcing a failure. [ 334.436284] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 334.448201] CPU: 1 PID: 12961 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #264 [ 334.455581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.464946] Call Trace: [ 334.467553] dump_stack+0x1c4/0x2b4 [ 334.471215] ? dump_stack_print_info.cold.2+0x52/0x52 [ 334.476434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 22:26:09 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) [ 334.481999] ? check_preemption_disabled+0x48/0x200 [ 334.487060] should_fail.cold.4+0xa/0x17 [ 334.491156] ? perf_trace_lock_acquire+0x15b/0x800 [ 334.496115] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 334.501258] ? print_usage_bug+0xc0/0xc0 [ 334.505344] ? perf_trace_lock+0x7a0/0x7a0 [ 334.509605] ? print_usage_bug+0xc0/0xc0 [ 334.513690] ? graph_lock+0x170/0x170 [ 334.517509] ? graph_lock+0x170/0x170 [ 334.521351] ? __lock_acquire+0x7ec/0x4ec0 [ 334.525615] ? find_held_lock+0x36/0x1c0 [ 334.529708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 22:26:09 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) [ 334.535267] ? should_fail+0x22d/0xd01 [ 334.539188] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 334.544328] __alloc_pages_nodemask+0x34b/0xde0 [ 334.549069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 334.554637] ? check_preemption_disabled+0x48/0x200 [ 334.559687] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 334.564731] ? perf_trace_lock_acquire+0x15b/0x800 [ 334.569697] ? perf_trace_lock+0x7a0/0x7a0 [ 334.573964] ? graph_lock+0x170/0x170 [ 334.577799] ? trace_hardirqs_off+0xb8/0x310 [ 334.582233] cache_grow_begin+0x91/0x8c0 22:26:09 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) [ 334.586316] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 334.591876] ? check_preemption_disabled+0x48/0x200 [ 334.596927] kmem_cache_alloc+0x665/0x730 [ 334.601096] ? print_usage_bug+0xc0/0xc0 [ 334.605190] ? lock_downgrade+0x900/0x900 [ 334.609359] ? check_preemption_disabled+0x48/0x200 [ 334.614410] radix_tree_node_alloc.constprop.18+0x1f7/0x370 [ 334.620169] radix_tree_extend+0x294/0x660 [ 334.624438] ? radix_tree_node_alloc.constprop.18+0x370/0x370 [ 334.630339] ? __kernel_text_address+0xd/0x40 [ 334.634833] ? unwind_get_return_address+0x61/0xa0 [ 334.639770] idr_get_free+0x83d/0xec0 [ 334.643587] ? save_stack+0xa9/0xd0 [ 334.647236] ? ida_pre_get+0x130/0x130 [ 334.651120] ? debug_smp_processor_id+0x1c/0x20 [ 334.655790] ? perf_trace_lock_acquire+0x15b/0x800 [ 334.660711] ? perf_trace_lock_acquire+0x15b/0x800 [ 334.665644] ? perf_trace_lock_acquire+0x15b/0x800 [ 334.670587] ? perf_trace_lock+0x7a0/0x7a0 [ 334.674814] ? graph_lock+0x170/0x170 [ 334.678611] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 334.684167] ? check_preemption_disabled+0x48/0x200 [ 334.689567] ? check_preemption_disabled+0x48/0x200 [ 334.694588] idr_alloc_u32+0x201/0x3f0 [ 334.698471] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 334.703374] ? p9_idpool_get+0x23/0x90 [ 334.707286] idr_alloc+0x111/0x1b0 [ 334.710840] ? idr_alloc_u32+0x3f0/0x3f0 [ 334.714907] ? do_raw_spin_lock+0xc1/0x200 [ 334.719142] p9_idpool_get+0x3d/0x90 [ 334.722872] p9_client_prepare_req.part.8+0xec/0xc30 [ 334.727970] ? delete_node+0x30e/0xd20 [ 334.731893] ? unwind_get_return_address+0x61/0xa0 [ 334.736850] ? p9_free_req.isra.7+0x140/0x140 [ 334.741359] ? idr_destroy+0x1c0/0x1c0 [ 334.745257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 334.750787] ? replace_slot+0x151/0x520 [ 334.754759] p9_client_rpc+0x1c2/0x1480 [ 334.758725] ? radix_tree_descend+0x2e0/0x2e0 [ 334.763221] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 334.768594] ? find_held_lock+0x36/0x1c0 [ 334.772688] ? find_held_lock+0x36/0x1c0 [ 334.776747] ? mark_held_locks+0xc7/0x130 [ 334.780890] ? _raw_spin_unlock_irq+0x27/0x80 [ 334.785402] ? _raw_spin_unlock_irq+0x27/0x80 [ 334.789892] ? lockdep_hardirqs_on+0x421/0x5c0 [ 334.794474] ? trace_hardirqs_on+0xbd/0x310 [ 334.798797] ? kasan_check_read+0x11/0x20 [ 334.802963] ? p9_fid_create+0x1e2/0x2b0 [ 334.807021] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 334.812482] ? kasan_check_write+0x14/0x20 [ 334.816731] ? do_raw_spin_lock+0xc1/0x200 [ 334.820974] p9_client_walk+0x208/0xb30 [ 334.824970] ? __update_load_avg_se+0x311/0xb90 [ 334.829642] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 334.835267] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 334.840294] ? d_alloc+0x28b/0x380 [ 334.843832] ? lock_downgrade+0x86c/0x900 [ 334.848021] ? v9fs_fid_add+0x240/0x240 [ 334.852014] ? kasan_check_read+0x11/0x20 [ 334.856165] ? do_raw_spin_unlock+0xa7/0x2f0 [ 334.860572] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 334.865194] v9fs_vfs_lookup+0x1f7/0x4a0 [ 334.869251] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 334.873475] ? d_alloc+0x290/0x380 [ 334.877007] ? v9fs_vfs_create+0x130/0x130 [ 334.881242] ? lock_rename+0x236/0x290 [ 334.885124] __lookup_hash+0x12e/0x190 [ 334.889013] do_renameat2+0x6c1/0x1180 [ 334.892906] ? user_path_create+0x40/0x40 [ 334.897077] ? __lock_is_held+0xb5/0x140 [ 334.901157] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 334.906715] ? check_preemption_disabled+0x48/0x200 [ 334.911770] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 334.917305] ? do_syscall_64+0x9a/0x820 [ 334.921274] ? do_syscall_64+0x9a/0x820 [ 334.925242] ? trace_hardirqs_on+0xbd/0x310 [ 334.929556] ? __ia32_sys_read+0xb0/0xb0 [ 334.933612] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 334.938969] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 334.944416] __x64_sys_rename+0x5e/0x80 [ 334.948384] do_syscall_64+0x1b9/0x820 [ 334.952261] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 334.957621] ? syscall_return_slowpath+0x5e0/0x5e0 [ 334.962558] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.967396] ? trace_hardirqs_on_caller+0x310/0x310 [ 334.972419] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 334.977450] ? prepare_exit_to_usermode+0x291/0x3b0 [ 334.982462] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.987387] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 334.992568] RIP: 0033:0x457579 [ 334.995767] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 335.014662] RSP: 002b:00007fe586f25c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 335.022384] RAX: ffffffffffffffda RBX: 00007fe586f25c90 RCX: 0000000000457579 [ 335.029667] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 22:26:10 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:10 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x80, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000200)={0x9, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {}, {0x0, 0x0, 0x0, @local}]}) [ 335.036940] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 335.044234] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe586f266d4 [ 335.051495] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:10 executing program 4: socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close(r0) 22:26:10 executing program 2 (fault-call:15 fault-nth:9): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:10 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:10 executing program 0: socket$l2tp(0x18, 0x1, 0x1) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x6, 0x2000) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000440)=0x1200, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) socket$pppoe(0x18, 0x1, 0x0) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) fsetxattr(r0, &(0x7f0000000380)=@random={'osx.', ')GPLGPL:\x00'}, &(0x7f00000003c0)='\x00', 0x1, 0x2) r3 = add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="f5c0e908b0d290030cdaee3ea4a3574827998bd2b68a276e1b0ee9e319cccd17dea2027ff11759d1fcdec67af77b44c54ee596d92f0af2fbf1bdf8103c56260c27e39a460a650562c6f5def21cfcf6b97b10fe3ceaac94af3572d6f1371ac8af383b9c6d3ccab498d646786b2d6ef02007cfb756d80922cd8f2db3b38471eb2d1bfdb0df7599f0", 0x87, 0xfffffffffffffffe) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x6, 0x101801) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r4, &(0x7f00000005c0)={0xa0, 0x19, 0x2, {0x620, {0x0, 0x3}, 0x8, r5, r6, 0xffff, 0x7, 0x7fffffff, 0xa4, 0xfffffffffffffff7, 0x0, 0xfffffffffffffff9, 0x3f, 0x1, 0x100000000, 0x7ff, 0x9, 0x6, 0x326954a6, 0x80000000}}, 0xa0) ioctl$KVM_DEASSIGN_DEV_IRQ(r4, 0x4040ae75, &(0x7f0000000340)={0x8, 0x1000, 0x28, 0x2}) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r3) 22:26:10 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x4000000000000007, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) ustat(0x256d, &(0x7f0000000080)) 22:26:10 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:10 executing program 4: socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close(r0) [ 335.351284] FAULT_INJECTION: forcing a failure. [ 335.351284] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 335.363162] CPU: 1 PID: 13001 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #264 [ 335.363175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.363181] Call Trace: [ 335.363211] dump_stack+0x1c4/0x2b4 [ 335.363236] ? dump_stack_print_info.cold.2+0x52/0x52 [ 335.363270] should_fail.cold.4+0xa/0x17 [ 335.363293] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 335.363309] ? graph_lock+0x170/0x170 [ 335.363337] ? print_usage_bug+0xc0/0xc0 [ 335.363359] ? graph_lock+0x170/0x170 [ 335.363374] ? find_held_lock+0x36/0x1c0 [ 335.363402] ? print_usage_bug+0xc0/0xc0 [ 335.400704] ? __lock_acquire+0x7ec/0x4ec0 [ 335.424713] ? find_held_lock+0x36/0x1c0 [ 335.428796] ? graph_lock+0x170/0x170 [ 335.432619] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 335.438175] ? should_fail+0x22d/0xd01 [ 335.442081] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 335.447196] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 335.453014] __alloc_pages_nodemask+0x34b/0xde0 [ 335.457710] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 335.462741] ? __lock_acquire+0x7ec/0x4ec0 [ 335.466996] ? perf_trace_lock_acquire+0x15b/0x800 [ 335.471969] ? __lock_acquire+0x7ec/0x4ec0 [ 335.476215] ? graph_lock+0x170/0x170 [ 335.480019] ? graph_lock+0x170/0x170 [ 335.483856] ? trace_hardirqs_off+0xb8/0x310 [ 335.488285] cache_grow_begin+0x91/0x8c0 [ 335.492360] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 335.497913] ? check_preemption_disabled+0x48/0x200 [ 335.502957] kmem_cache_alloc+0x665/0x730 [ 335.507139] radix_tree_node_alloc.constprop.18+0x1f7/0x370 [ 335.512885] radix_tree_extend+0x294/0x660 [ 335.517140] ? radix_tree_node_alloc.constprop.18+0x370/0x370 [ 335.523058] ? find_held_lock+0x36/0x1c0 [ 335.527163] idr_get_free+0x83d/0xec0 [ 335.531000] ? ida_pre_get+0x130/0x130 [ 335.534908] ? debug_smp_processor_id+0x1c/0x20 [ 335.539589] ? perf_trace_lock_acquire+0x15b/0x800 [ 335.544536] ? debug_smp_processor_id+0x1c/0x20 [ 335.549217] ? perf_trace_lock_acquire+0x15b/0x800 [ 335.554174] ? perf_trace_lock+0x7a0/0x7a0 [ 335.558424] ? perf_trace_lock+0x7a0/0x7a0 [ 335.562692] ? debug_smp_processor_id+0x1c/0x20 [ 335.567377] ? graph_lock+0x170/0x170 [ 335.571238] idr_alloc_u32+0x201/0x3f0 [ 335.575165] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 335.580026] ? p9_idpool_get+0x23/0x90 [ 335.583954] idr_alloc+0x111/0x1b0 [ 335.587512] ? idr_alloc_u32+0x3f0/0x3f0 [ 335.591587] ? do_raw_spin_lock+0xc1/0x200 [ 335.595846] p9_idpool_get+0x3d/0x90 [ 335.599577] p9_client_prepare_req.part.8+0xec/0xc30 [ 335.604696] ? __kernel_text_address+0xd/0x40 [ 335.609219] ? p9_free_req.isra.7+0x140/0x140 [ 335.613740] ? save_stack+0xa9/0xd0 [ 335.617390] p9_client_rpc+0x1c2/0x1480 [ 335.621377] ? v9fs_vfs_lookup+0x3f5/0x4a0 [ 335.625642] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 335.631028] ? find_held_lock+0x36/0x1c0 [ 335.635119] ? graph_lock+0x170/0x170 [ 335.638946] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 335.644498] ? check_preemption_disabled+0x48/0x200 [ 335.649524] ? check_preemption_disabled+0x48/0x200 [ 335.654565] ? __lock_is_held+0xb5/0x140 [ 335.658654] ? p9_client_stat+0xc1/0x720 [ 335.662732] ? kmem_cache_alloc_trace+0x353/0x750 [ 335.667589] ? p9_client_walk+0x57e/0xb30 [ 335.671753] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 335.677231] p9_client_stat+0x12e/0x720 [ 335.681216] ? p9_client_walk+0x57e/0xb30 [ 335.685388] ? p9_client_mknod_dotl+0x650/0x650 [ 335.690076] ? p9_client_walk+0x24c/0xb30 [ 335.694240] ? __update_load_avg_se+0x311/0xb90 [ 335.698936] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 335.704575] ? v9fs_fid_add+0x231/0x240 [ 335.708559] ? d_alloc+0x28b/0x380 [ 335.712121] ? lock_downgrade+0x86c/0x900 [ 335.716307] v9fs_inode_from_fid+0x7a/0x350 [ 335.720649] ? do_raw_spin_unlock+0xa7/0x2f0 [ 335.725079] ? v9fs_vfs_getattr+0x270/0x270 [ 335.729429] v9fs_vfs_lookup+0x3f5/0x4a0 [ 335.733498] ? d_alloc+0x290/0x380 [ 335.737061] ? v9fs_vfs_create+0x130/0x130 [ 335.741302] ? lock_rename+0x236/0x290 [ 335.745217] __lookup_hash+0x12e/0x190 [ 335.749124] do_renameat2+0x6c1/0x1180 [ 335.753060] ? user_path_create+0x40/0x40 [ 335.757226] ? __lock_is_held+0xb5/0x140 [ 335.761305] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 335.766854] ? check_preemption_disabled+0x48/0x200 [ 335.771909] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 335.777464] ? do_syscall_64+0x9a/0x820 [ 335.781496] ? do_syscall_64+0x9a/0x820 [ 335.785489] ? trace_hardirqs_on+0xbd/0x310 [ 335.789820] ? __ia32_sys_read+0xb0/0xb0 [ 335.793901] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 335.799287] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 335.804764] __x64_sys_rename+0x5e/0x80 [ 335.808759] do_syscall_64+0x1b9/0x820 [ 335.812660] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 335.818043] ? syscall_return_slowpath+0x5e0/0x5e0 [ 335.823002] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.827872] ? trace_hardirqs_on_caller+0x310/0x310 [ 335.832909] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 335.837971] ? prepare_exit_to_usermode+0x291/0x3b0 [ 335.843017] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.847893] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 335.853091] RIP: 0033:0x457579 [ 335.856297] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 335.875213] RSP: 002b:00007fe586f25c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 335.883638] RAX: ffffffffffffffda RBX: 00007fe586f25c90 RCX: 0000000000457579 [ 335.890920] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 22:26:11 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 335.898375] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 335.905664] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe586f266d4 [ 335.912957] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:11 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2000, 0x0) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f00000000c0)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:11 executing program 4: socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close(r0) 22:26:11 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) [ 336.055134] Unknown ioctl 8817 22:26:11 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = dup2(r2, r3) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x3f}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000002c0)={r5, 0xc921, 0x30}, 0xc) r6 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x803, 0x400) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000300)={0x0, @aes256, 0x0, "46dd5352e1f50fca"}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x2000000000000196, &(0x7f00000000c0)=[{0x10001, 0x401, 0x4, 0xa}]}, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000000)=0x110000) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000040)={0x1fffd}) memfd_create(&(0x7f0000000180)='vboxnet1lo\x00', 0x4) 22:26:11 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 336.080745] Unknown ioctl 8817 22:26:11 executing program 2 (fault-call:15 fault-nth:10): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:11 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:11 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:11 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x3, 0x80600) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000000c0)={0x4, 0x6760, 0x20}) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r3) 22:26:11 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000140)=""/30) r2 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000100)={0x80000000, 0x1}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) close(r3) 22:26:11 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:11 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:11 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) [ 336.382904] FAULT_INJECTION: forcing a failure. [ 336.382904] name failslab, interval 1, probability 0, space 0, times 0 [ 336.394163] CPU: 0 PID: 13046 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #264 [ 336.394175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.394181] Call Trace: [ 336.394209] dump_stack+0x1c4/0x2b4 [ 336.394234] ? dump_stack_print_info.cold.2+0x52/0x52 [ 336.394266] should_fail.cold.4+0xa/0x17 [ 336.394286] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 336.422394] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 336.422416] ? graph_lock+0x170/0x170 [ 336.422441] ? print_usage_bug+0xc0/0xc0 [ 336.422459] ? __lock_acquire+0x7ec/0x4ec0 [ 336.437423] ? __lock_is_held+0xb5/0x140 [ 336.445279] ? __account_cfs_rq_runtime+0x790/0x790 [ 336.445312] ? __lock_acquire+0x7ec/0x4ec0 [ 336.445327] ? graph_lock+0x170/0x170 [ 336.445340] ? graph_lock+0x170/0x170 [ 336.445372] __should_failslab+0x124/0x180 [ 336.453640] should_failslab+0x9/0x14 [ 336.453659] kmem_cache_alloc+0x47/0x730 [ 336.453679] ? print_usage_bug+0xc0/0xc0 [ 336.453703] radix_tree_node_alloc.constprop.18+0x1f7/0x370 [ 336.453724] radix_tree_extend+0x294/0x660 [ 336.496601] ? radix_tree_node_alloc.constprop.18+0x370/0x370 [ 336.502501] ? find_held_lock+0x36/0x1c0 [ 336.506594] idr_get_free+0x83d/0xec0 [ 336.510422] ? ida_pre_get+0x130/0x130 [ 336.514318] ? debug_object_active_state+0x2f5/0x4d0 [ 336.514339] ? lock_downgrade+0x900/0x900 [ 336.523599] ? trace_hardirqs_off+0xb8/0x310 [ 336.523614] ? kasan_check_read+0x11/0x20 22:26:11 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:11 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) [ 336.523631] ? do_raw_spin_unlock+0xa7/0x2f0 [ 336.523650] ? print_usage_bug+0xc0/0xc0 [ 336.540657] ? kasan_check_write+0x14/0x20 [ 336.544908] ? do_raw_spin_lock+0xc1/0x200 [ 336.549171] ? graph_lock+0x170/0x170 [ 336.553000] ? trace_hardirqs_off+0xb8/0x310 [ 336.557420] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 336.557443] idr_alloc_u32+0x201/0x3f0 [ 336.557463] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 336.557484] ? p9_idpool_get+0x23/0x90 [ 336.575362] ? is_bpf_text_address+0xac/0x170 [ 336.579874] idr_alloc+0x111/0x1b0 [ 336.583433] ? idr_alloc_u32+0x3f0/0x3f0 [ 336.587508] ? do_raw_spin_lock+0xc1/0x200 [ 336.591773] p9_idpool_get+0x3d/0x90 [ 336.595507] p9_client_prepare_req.part.8+0xec/0xc30 [ 336.600634] ? __kernel_text_address+0xd/0x40 [ 336.605158] ? p9_free_req.isra.7+0x140/0x140 [ 336.605186] ? save_stack+0xa9/0xd0 [ 336.605206] p9_client_rpc+0x1c2/0x1480 [ 336.617298] ? v9fs_vfs_lookup+0x3f5/0x4a0 [ 336.621564] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 336.621585] ? find_held_lock+0x36/0x1c0 [ 336.621604] ? graph_lock+0x170/0x170 [ 336.634826] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 336.640379] ? check_preemption_disabled+0x48/0x200 [ 336.645412] ? check_preemption_disabled+0x48/0x200 [ 336.650458] ? __lock_is_held+0xb5/0x140 [ 336.654554] ? p9_client_stat+0xc1/0x720 [ 336.658639] ? kmem_cache_alloc_trace+0x353/0x750 [ 336.663564] ? p9_client_walk+0x57e/0xb30 [ 336.667730] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 336.673206] p9_client_stat+0x12e/0x720 [ 336.677199] ? p9_client_walk+0x57e/0xb30 [ 336.681367] ? p9_client_mknod_dotl+0x650/0x650 [ 336.686050] ? p9_client_walk+0x24c/0xb30 [ 336.690724] ? __update_load_avg_se+0x311/0xb90 [ 336.695415] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 336.701057] ? v9fs_fid_add+0x231/0x240 [ 336.705045] ? d_alloc+0x28b/0x380 [ 336.708602] ? lock_downgrade+0x86c/0x900 [ 336.712772] v9fs_inode_from_fid+0x7a/0x350 [ 336.717107] ? do_raw_spin_unlock+0xa7/0x2f0 [ 336.721628] ? v9fs_vfs_getattr+0x270/0x270 [ 336.725956] v9fs_vfs_lookup+0x3f5/0x4a0 [ 336.730007] ? d_alloc+0x290/0x380 [ 336.733562] ? v9fs_vfs_create+0x130/0x130 [ 336.737783] ? lock_rename+0x236/0x290 [ 336.741677] __lookup_hash+0x12e/0x190 [ 336.745560] do_renameat2+0x6c1/0x1180 [ 336.749447] ? user_path_create+0x40/0x40 [ 336.753594] ? __lock_is_held+0xb5/0x140 [ 336.757657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 336.763190] ? check_preemption_disabled+0x48/0x200 [ 336.768236] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 336.773789] ? do_syscall_64+0x9a/0x820 [ 336.777758] ? do_syscall_64+0x9a/0x820 [ 336.781725] ? trace_hardirqs_on+0xbd/0x310 [ 336.786044] ? __ia32_sys_read+0xb0/0xb0 [ 336.790110] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 336.795465] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 336.800936] __x64_sys_rename+0x5e/0x80 [ 336.804912] do_syscall_64+0x1b9/0x820 [ 336.808810] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 336.814176] ? syscall_return_slowpath+0x5e0/0x5e0 [ 336.819583] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 336.824429] ? trace_hardirqs_on_caller+0x310/0x310 [ 336.829439] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 336.834447] ? prepare_exit_to_usermode+0x291/0x3b0 [ 336.839457] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 336.844293] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 336.849493] RIP: 0033:0x457579 [ 336.852699] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 336.871618] RSP: 002b:00007fe586f25c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 22:26:12 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) r3 = memfd_create(&(0x7f0000000080)='.\x00', 0x5) write$P9_RWALK(r3, &(0x7f0000000100)={0x16, 0x6f, 0x1, {0x1, [{0x2, 0x2, 0x6}]}}, 0x16) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) accept4$nfc_llcp(r3, 0x0, &(0x7f0000000140), 0x80000) 22:26:12 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x41, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000000c0)={0x8, 0x14, [0x0, 0x200, 0x5, 0x2, 0xfffffffffffff04f]}) close(r2) 22:26:12 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:12 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:12 executing program 2 (fault-call:15 fault-nth:11): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 336.879322] RAX: ffffffffffffffda RBX: 00007fe586f25c90 RCX: 0000000000457579 [ 336.886582] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 336.893844] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 336.901126] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe586f266d4 [ 336.908394] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:12 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:12 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 337.040410] FS-Cache: Duplicate cookie detected [ 337.045409] FS-Cache: O-cookie c=000000005612fe5c [p=00000000845ed810 fl=222 nc=0 na=1] [ 337.053728] FS-Cache: O-cookie d=00000000b0f58035 n=0000000056aa8413 [ 337.053737] FS-Cache: O-key=[10] '34323934393730383535' [ 337.065782] FS-Cache: N-cookie c=000000004c94bf30 [p=00000000845ed810 fl=2 nc=0 na=1] [ 337.073924] FS-Cache: N-cookie d=00000000b0f58035 n=000000003dae026e [ 337.080507] FS-Cache: N-key=[10] '34323934393730383535' 22:26:12 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:12 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xffffffffffff0001) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) fcntl$setflags(r0, 0x2, 0x1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:12 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:12 executing program 0: r0 = memfd_create(&(0x7f0000000000)='}selinuxprocsecurity#\x00', 0x6) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/57, &(0x7f00000000c0)=0x39) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:12 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:12 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:12 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x80400, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:12 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:12 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:12 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000640)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x6, 0x500) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000340)={0x8, 0x101, 0xffffffff, 0x200}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:12 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:12 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockname$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) r5 = socket$l2tp(0x18, 0x1, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000140)=0x9) r6 = dup3(r1, r5, 0x80000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x797e, 0x1, 0x100000001, 0x80000001]}, 0xc) getsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f00000001c0)={@rand_addr, @local}, &(0x7f0000000280)=0x8) connect$l2tp(r5, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000180)=r6) ioctl$FS_IOC_FSSETXATTR(r5, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:12 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8, &(0x7f0000000140)="153f6234488df55cd25d76") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3, 0x80000000}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x3) close(r2) 22:26:12 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:12 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:12 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:12 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x8000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f0000000280)="52ced0e643fb8f6d5822caf713e662e0b7dbc21c34e8410799e9731635fe0f513d3b0727c29fca8654a3533ad3d55ad6294af7618ab630a68396d94cbdbb4c30a9f91b111fcc2a30945ac2582bc604e4bc5c9afad397442c1c72f260b211bb6b5b7be13af1f82ed44b6d51639f6bc2267aaa1c96f22fcd1863329639b487d7b1b1f6f642b2289a11da515aa9b9bebeac57149e377f73edcba5843386c999f80b8bb72d8e1e123da8f9021fed2bd9f972c4eddb0ee621015c222748d6"}, 0x358) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:12 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) prctl$setendian(0x14, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:12 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x22480, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x8) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RRENAME(r1, &(0x7f0000000600)={0x7, 0x15, 0x2}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000340)) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:12 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:12 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:12 executing program 3: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:12 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000080)={'bcsf0\x00', @ifru_names='team_slave_0\x00'}) r3 = semget(0x3, 0x1, 0x8) semctl$IPC_RMID(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x280240, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=0x0, &(0x7f0000000200)=0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r5, 0x7}, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) [ 337.882977] 9pnet: Insufficient options for proto=fd 22:26:13 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) sendfile(r1, r3, &(0x7f0000000000), 0x7ff) ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000040)={0x1fffd}) [ 337.936695] 9pnet: Insufficient options for proto=fd 22:26:13 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:13 executing program 3: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:13 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 338.077516] 9pnet: Insufficient options for proto=fd 22:26:13 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x896ac2815fb96763) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = memfd_create(&(0x7f00000007c0)='/dev/null\x00', 0x2) setsockopt$inet6_dccp_int(r2, 0x21, 0x17, &(0x7f0000000a80)=0xd4a1, 0x4) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) r3 = creat(&(0x7f0000000600)='./file0/file2\x00', 0x21) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=0x0, &(0x7f0000000780)=0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000900)={r4, @in={{0x2, 0x4e22, @rand_addr=0x7}}, 0x7fff, 0x516e}, 0x90) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno.', @ANYRESHEX=r1, @ANYBLOB=',\x00']) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x10000, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000340)=0xff, 0x4) [ 338.116484] 9pnet: Insufficient options for proto=fd 22:26:13 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:13 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) setpriority(0x0, r3, 0x6) 22:26:13 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000140)={0xb52b, 0x1}) r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x10001, 0x712}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000100)={0x20, r4}) close(r2) 22:26:13 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:13 executing program 3: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 338.264126] 9pnet: Insufficient options for proto=fd 22:26:13 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) [ 338.323372] 9pnet: Insufficient options for proto=fd 22:26:13 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:13 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 338.360350] 9pnet: Insufficient options for proto=fd [ 338.364061] 9pnet: Insufficient options for proto=fd [ 338.390420] 9pnet: Insufficient options for proto=fd 22:26:13 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:13 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:13 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000340)='./file0/file0\x00', 0x1, 0x1, &(0x7f0000000600)=[{&(0x7f0000000a80)="b6a9a1538113c9aeb0fc4cd15fb04e868ed40b46f2bad73a095d4093805daebe553ddac96f2c7057ea27ffae46132949362f983b83bb60892fb9d335dc36cd05ac2a6c3ef68e0e1604fd700646680b0939e844a2ef2eeea78b32a5235edfa8ae3f0e251046127f75a8890f9d1e87eee06c06fdcca0f2641f04626ef86b8bdc47a6a5f77208ffa5dcb8608f68a53f63fd56c5d4a55807367fc464b0bb959713f02adf4e754d6f070edeb8eb58a36098744237d1bc2f8b91ae529cc5879486b924f9d248e4f4d22cb79d12893129ec1146bc121ccf9a0efe0ef8399e186e42974c1f52c5d873a66ca6c46ada1c66852d5b3a758d9330105da3d743fd726c459c82dc6be91af6c5969e85eabf269d377c34fdd063a1bcee29547cac55ce2c417dd54de7faf59898b28a677c68dc54a479470991160f39f49aa4c3fb87f6cf71a00599fed2d3637872131dfe26b2bbf64fef6ef6c95b710cb2ec38186450f681a39e4d691b63b269fd1177de72e1a70870544662265cad9d271421fb36b37be1ad74574f1451dd6e449a91996b5f79d4f31a9bccaed8df82fb3025ce3d407afdbd9ee089d3ff591f9bf6e5102509468e457734f6c827eeb13175b00646cda66e480aee5436c8799533a528c310adb815d276ddb2d65bb68c3fc7c73db21476c366f8613dd27f6261be55c84986760e86f37128866bc2e58476bfc8b067029aba222be5669f6ae915d6db122dd1d94db1d86eb40818354e4267f469bee8c92f0497bc83513e9e603ed49c3e0938d1c3590b8d1fbc5e734bb2b60725659c84d18e6644ada7f4ef8fc1167f9852e795da07cfda1bc74bd78d79c04f3c39c2ed6572280598104a4b6f3bba62e985e9c4014507327359af0d1e8aa3076fb872f33f55c7c692212c95891df5123b20aa7dc6a42ae4a3f08a970c3ef8745464cf479547d9a044080ba567ed99ff2e96d483a98606f786242bc22e47c726288a3383e8ee3d858659060f3a6d27d9fec0a36554944eb410ec20d6baddb4380797bb7b38955d781bd525de5a5c69f72757a55754d9c0bdbe35e32a8698e182ba79041c0d21761d5176fcb931ed935477b3090a63322f6462b722cff67bc42878d8b4655f07d5d140fded0d087af90507f2ef11b6414b54cea020d8ac5e4ccdd5dd21a6135ba52ae0e495d11ab7587b710082020afee9a0b93b3b2500ec65eec296c454db768aac4604e2429c2418453afc5f6024e1a726d6fcb1063a988f370e3e5416067e1a55196e4e48a5d0150b83d894c697b99dd058a830658a23c2b90ec31779ee66aac3e276c3ed107f5216727b178a3ee53748960e647db119dad11793e6cb054c255460a288de2b2b593f059b6cdb8b594384e7acb5b4ad628248d535731f460208a603253dfe45ff7845d273f635502caff945caae0461558d8ec5659720551178a14691353c4a218fc692df834aaa5399ab14199eea6a6363445bbe81b078ab3d1eb899809b642921edec88856d7b317db3841658a39a4742c142ba0765d51c3aac91a11f833a6bb415165c532f2d07ccceb04ba77a569176202cd9021cbd2c2acf0659a5253bd6c8771b94701205b3e43fb45f3a30840418810322c68f65bc9d2b77149b12440e34ce404610186f110c391277e299fa5cd83a701f5c6555fdfd4a784c98c026a1a35b0bf658f181be41c58b2d4d5067d0cf8f4f35687cfd66ebd059e05ad3b86c7bc3570157e8100d7f99ad10afa768cf32c8f7778fac305220d5a514423ed2a374bd697fb23ac370e6ac968ebd4a3d3d73ccaaa1bb8b7d2accf401506f15f2fa55bb249ae841a75c08ffc6725363841248b851c6626b39e8d81f041a29d858913d6105ff23d644c7604e0ad96f3b7918622885a704be02d8aa9988a9f5b3ff033f6918e8115b3f96d9f8e275cba61c1bee6f8e1a786151a4251d45ad04d968eae6eed435e4664eed918d8728299ba0ffff4050d0f9cf19da85243ca16d42ab7e092074f3347cd0b0116ccb98ec487191db0aab61ed2473153cec1ea749fd5152d74a3af22266643f9eb785b37198ac8b8f65f2d04a34670b6a88ca6d70ea747f15098baf958d5da48cc1cc0be7946b48a38a02ab175e662b629807fb5855787ddab6a08b3d2766ce23787ed679cd62955d838080f8a1a16d33c922597bcdc99053e648c22cf971b473620265ce212fcdcc6d4f0b66ee8dccb069a14e507f8fdd514d54bea1eec57c6cc0ccbacfd73adada1397781e69d84d6d637347d8b53af25e349c7bdd54eab1d1ef6337ae57098c9205cfb009676db837208a17b116c8abe2814e116423b4eb4f3937e3976f3dcc2f41ac56e55d128b0b4a2607c48dc5c2edebc9d53d7501978e0a3b9544078aed404cda7c590a980a5ca30deb1b27b325a6f166fe911b2b3fe3ed37c622a08ec87304243d0ee0938f0ea4102bd8ad6f7503abf962e24fe74c4b1ee8049ef5ee8d01192c513efb4afbcf04d5671d2ca2a016e4d112c3877072657410ea9553b150b84ad5fdf1922564189bc41696a06e05f06879d9727a5fe232bff770aae39d981fa31bb03e295f5c84cc435d38878daa90246fa6f377fb0c665e7951f6b84fc2a548c5e36bd241e55211d50ff9a17aaf98449349b2e1d9bef903f2309116f2aebe09d657075a7eb6a5d340d24ca1525e48b7a0b8f1b0c376b7fd92de7a352811643347b17d9e0b8d0b545461bbef017a2d3440cf2c2a2472d9152396423ea627ea7293ce933f4eab3017b43048440aca575834ecd899a072033e18d8913742a194350bde60e3bf515d289a3c9f8a8a74b6483908a45dce241c96cd3ac779ac6eb6537bf332fb2a6c7188c055474973f7ae760c61ce0eab5b679a9dc2b08ebd7eaac145be37369cac5e841b5ae7e6a6899bf23df86355d2c31b9e4e36ae432cfe6be338c30dda86ca6bfc2c675a1f62b2a2aa52b13d9ccdec1d51d72bf1a4cf313493d086055aa35da56e5ad2a66e35297846d4020bd1a0645dd0e84fdc5c36d83219c58bea534f0d881c5d6dfd5ba6459406cb0250780ff119a8380ef47b6e1ecb97c206a67f7d74df594ce25d0a127a5eb8f2e99f431a784ed70e2338f6c9dc8ec5ac5f38047891d64d5dfc4b7d30055c86ee70227df1209a944e628751d19dd026093e534651d7938d56caef59e32522e347700215ce0f8b940c32acdd56bab6629e1f65b6e9d96e439d92c78c3b9a598029b9693393b876ac1d055cd137b44488f2666b671908ff7485b8e963b4646f10c0d7da6376809a964a3dfa75ae1a8dbf304cd9f7e5e1682cc927e31db82faa64461b13f526d1e85401ca5c49ad64cbcefc90ac88979df1f3b9f5579444e51506a6930d75cc08d2b658ef2658bfed744e43c5953135b9ff22e77fef4b612740acf237064a3682cc7f8c07509af4c5e9b0b70a2cb0d494be5c0571968226ff433b3eb67ea18ce4d259aa429badccb8c2239c5dbce1286d8a23e708c5b3a56120210e5f4112c37195c87def123e2bef0e32def5cba13497f3db679b04d9b0195470defbee17bc09d5256bd1ff186b47596a94c50e0da3d963dff5c821ad5884eef732ca4a8a28c3ef92dae0d06eb4260cec4ebcf9b7dfc3d02add6549679c8e0c7875cbff0bda1c46184d17f02c0549997bef20ba99b4d3a935d2eac885ea6563c7c8d4a9a71b0177356691a0908c6f83265878163d629759a9a94814d0415bdad82fcb9e57e3fe378eb669831412eea75bc5ddcaaa212b8dee103fd6cce15ae0b146a71b67f451574e5896c21b4acc0a797000118c14a27ff9e6e727b34d96703b61f5a6f99df2e59587f71565b35b9213c1431021ff32522c2b51b1d0d644fe9726a72f5c45853e7272c364fb8bd87ae5adf9b390204b8df2367b4bb983bff6da342e6eda934d402ce95b1672f87cb11777857a6c8c9c632108c9db1292c9ff4b5434082986f1b172032ebeeb89e6499b566bcfc21cff104d8e255d017410adfa5d713aebd87a571e8d65b71b046cb516b6c91151e36da99de23d71d452272ce1ecf13588a84068b5677ec71f3fa0c802e72e8a93808a4515c82e1ddb2ae5efacdfc1aca9f6d94476ae061a4b8485e4cc3e9b32b760e373bd47a0cd387982fe67329f40412bbcc1d82c0ab584e76e1a11fd209e00485c7d21753cb47b4bf431519483f6385dfdf680c34330d41719656ccb0e7d3e978ee59f8adf8c594bc96138a7cfb8dd2ad2e8aa1c51a970be4b92425dbcd8651645a726f1620fc623cc846d1cb344ea13ecca1afa87153f7e6c70ade460df426e52aa469d7fdd3d723cb7f0cdf62707505ef50e64a376a7ca55ed9ba9101530971015987ac9e1644daa0758fa977e9234b1c78e3da16388f082428bf028136e82cc55beb9913f673558dd9411a5e1cd5bb992156ee255dc1bab92c1a6faffd8620c205e7d892c1fa42d98facc31b8b356701c1ff5989dd20237d23d69d8798c6dc60422dcf86db6da91fd59973da70cd4a7fbc0d437cdd28112fded88ed38f515d4f194c2f4909fea4a36e2e5a7c7b902c092e4b216cd40eacf1b89c9abc158d0b7a6a0c8d7147130f1f295376966613dce1c9b090ef49e48f2252616727ada09b7c0f9e9f21e8bcb9ffdd9e97824cdb66e9300bcb47e5a932e46f46e2e3f588d92e5b101223a63d6eea8d2a38b5a7c3454e7323db3e59198044f7833de172739a28b215f15744debc9ed1443d86d5bb6d682885cdfc56d3dc88fb452ae289edec2a4fe09885be748e75d77ba5e03a7bcc2f93f1ad00438e3e670541a8b126d6abedb9ade49f4e8a61bf6e7f5ae2485ca137e248c3c74b606eec9ee669cf3d5b267beab45539a11e2af3230aea4c45106c5e591879313722290a7b423a98f8b7a7d44defd450c1ffaaef3e9dfbd76e1357d8a58138a14cf40b24c1d10703a484448d55a13d0f2f826d97bfa4a7655b831142d55a6e22298f614be30306a21c644b08c643cd6466d21465a58c557b3a596ca8fec049e7706fae5b0fbf987796d2a348f093d7030c94fc47fda7864669d568313a9f432f6527d3b5b73e020caf10a1af47211c90d305bf93df748ecbc41f9224da773098632987e0b4ad11c3d84a05efc74ea6ca5e839c136ac6896993b8aa8dc9f851fc8da54b89542d899a172f9670897bff70d76749ad73d4a419263cc60cc3f3d54f1bf3e93b79ff80bdebc95dfacf8ed6da1c2600d47c386e42e27867af5fb4da8db8b94253b2258c112461e5c849e23c6fb48cbff24b95a0476ea440c92b2c0532127ca8d6f99e4de96d8ed55db08e13faab9fdd8ad194ec92491b96067cbf3b0a3f42ff817e5d3c303c37e36360a4d1399fd2af46e566ed777f56d4071609c09a8c87f1f34e245fe4dc87a875f52e1943e615030c896a2c1417c2dbc19421f0ab01b986a4e498639bd3654fd23dc8008a326436fd093dd478207c027b6fd810568552380205469c3c6c5f9ba1b369a929451d29557f4c3f5e9f4f2345fb82968c638167fb6a4daa7ef26ce705adec1bf829ec8fc8a38ce3315d6c7e199464aa589a57bc4130a1c6268cc0657812b55b1a1dd892ba8fa7866669592186708d8b2dade8af0c29972ae820dea2b78fe83a8902472f19cf5815c68cf09179c9e6e28ffde2f3b543f446d71e1a81fa771fcb53cc743c0746548096360ec6c7a674556f6b0a7c6c713b5429ed7f8770cac1e8dc185a36229c58997150a8863c8be9e6086bb8dd2a991fffd63f173b21e6fa6a828a377730813a0bbe0834605df72ddf6647f139d4dd907dd0985c403172c", 0x1000, 0x4}], 0x2000000, &(0x7f0000000640)={[{@dots='dots'}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@permit_directio='permit_directio'}]}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:13 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, 0x2, 0x3, 0x2, 0x3}}, 0x26) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_FSSETXATTR(r1, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:13 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:13 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x4a, 0xfffffffffffffffe, 0x3000000000) fallocate(r4, 0x0, 0xdfa3, 0x5) fallocate(r4, 0x20, 0x0, 0x100000000) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000200)=0x6) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr, 0x0}, &(0x7f00000000c0)=0xc) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x4e20, 0x0, 0x4e21, 0x0, 0x2, 0x80, 0x80, 0x4, r5, r6}, {0x36e7, 0x7, 0x44, 0x5, 0x2, 0x8, 0x400, 0x4}, {0x6, 0x21, 0x8, 0x7}, 0x7, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in6=@mcast2, 0x4d6, 0xff}, 0x2, @in=@local, 0x0, 0x3, 0x3, 0x1, 0x19c800000000, 0x81, 0x100}}, 0xe8) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) [ 338.582205] FAT-fs (loop2): Unrecognized mount option "defcontext=unconfined_u" or missing value [ 338.594358] 9pnet: Insufficient options for proto=fd 22:26:13 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:13 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = dup2(r2, r3) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x3f}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000002c0)={r5, 0xc921, 0x30}, 0xc) r6 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x803, 0x400) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000300)={0x0, @aes256, 0x0, "46dd5352e1f50fca"}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x2000000000000196, &(0x7f00000000c0)=[{0x10001, 0x401, 0x4, 0xa}]}, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000000)=0x110000) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000040)={0x1fffd}) memfd_create(&(0x7f0000000180)='vboxnet1lo\x00', 0x4) 22:26:13 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000080)={0xb8}) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:13 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) [ 338.786033] FAT-fs (loop2): Unrecognized mount option "defcontext=unconfined_u" or missing value 22:26:13 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x101000) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:13 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:13 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:14 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x400800, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000140)=0x2, 0x4) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000080)={'syzkaller0\x00', 0x9}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xc832, 0x4) ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:14 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000340)=0x7, 0x4) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:14 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x3, 0x80600) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000000c0)={0x4, 0x6760, 0x20}) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r3) 22:26:14 executing program 5: r0 = socket$inet6(0xa, 0x4000000000080008, 0x9) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x482400) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:14 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:14 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:14 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:14 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:14 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_dev$adsp(&(0x7f00000004c0)='/dev/adsp#\x00', 0xe561, 0x30000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000c40)={0x0, @in6={{0xa, 0x4e23, 0x401, @loopback, 0x8}}, 0x80000000, 0x1fe00000000000}, &(0x7f0000000500)=0x90) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000d00)={r3, 0x3}, 0x8) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="24f076657874650500ee8a725955"]) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000d40)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, '(', 0xfffffffffffffd2e, 'rfdno', 0x2, 'rfdno', 0x11, "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"}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r4 = getgid() write$P9_RGETATTR(r1, &(0x7f0000000b80)={0xa0, 0x19, 0x1, {0x1000, {0xcc, 0x0, 0x6}, 0x4, 0xee00, r4, 0x400, 0x10001, 0x9, 0x6, 0x7ff, 0xfffffffffffffc01, 0x809f, 0x100000000, 0x561, 0x8, 0x8001, 0x6, 0x0, 0x7fffffff, 0x4}}, 0xa0) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000a80)) getgroups(0x2, &(0x7f0000000340)=[0xee01, 0xee00]) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1, {0x490, {0x10, 0x4}, 0x108, r5, r6, 0x9, 0x2800000, 0x2, 0xfffffffffffffffa, 0x80, 0x2, 0x0, 0x8, 0x1, 0x1, 0xffffffffffffff87, 0x1, 0xfffffffffffffff7, 0x2, 0x1}}, 0xa0) [ 339.198387] 9pnet: Insufficient options for proto=fd 22:26:14 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="6f302287a531020805bd6965463c5f7b236b21622a8514ad81bc5a988ed2e9d7088503839916821929c518e21c8d4f0be481", 0x32, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000540)="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", 0x1000, 0xfffffffffffffffd) keyctl$negate(0xd, r1, 0x7f, r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x6b) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r4, 0x80487436, &(0x7f0000000000)={0x1fffd, 0x0, 0x0, 0x20}) 22:26:14 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x90, "ad2d98a0373ae6e702595efa436ec8f7bc041cb933a1a777051dd391563dd792299dc6fea52fa0929bbad3bd01f6e3e4176d8d0a289ec85dbe59b2714a6ec61b843cf9c6e4ca3873703b85c257fda6fdaaabc601dbaf7028762b27441299533e3c6851c918653c00dd289efc06759098d731cf304cb36a8a6b95ca2fc0cbde23dac44e382ae1ca4312b251a76f1eabe2"}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={r3, 0x9}, &(0x7f00000001c0)=0x8) 22:26:14 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:14 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:14 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 339.396060] 9pnet: Insufficient options for proto=fd [ 339.400236] 9pnet: Insufficient options for proto=fd 22:26:14 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 339.454452] 9pnet: Insufficient options for proto=fd 22:26:14 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) r3 = getpgid(0xffffffffffffffff) process_vm_readv(r3, &(0x7f0000000400)=[{&(0x7f0000000080)=""/84, 0x54}, {&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/127, 0x7f}], 0x5, &(0x7f0000000480)=[{&(0x7f0000000000)=""/17, 0x11}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x2, 0x0) 22:26:14 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={r1, 0x9b, "0074c21b89c7894d75e8dea6197797608650b08c9fd6ba40bdcb2dbc99cfaa4243b5b4c0c1f3055b74c508bdd6c10940c52b7fd444178ce3569eae6059ae803ae8f3ca56ce2b1c770083d85eb2aa3ac38ba3949d5cd807e26925935a6d66001a05cf7bb4346ac0da82d31bdb11d3ee2325c6bf03b49ab944cf58fb7c63565b7c9912a13cd27e9a9f8b902246c23d902bf65c8c7bcea7b3c7c9859c"}, &(0x7f00000001c0)=0xa3) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x10000) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x3}}) syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x2800) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r3) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0xa02, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f00000002c0)=""/70) 22:26:14 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) close(r1) 22:26:14 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000a80)) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 339.602888] 9pnet: Insufficient options for proto=fd 22:26:14 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f01000100000000000000000000000000"], 0x15) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:14 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x101002, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000100)={0x0, 0x8, 0x7ff, &(0x7f00000000c0)=0x7f}) close(r2) 22:26:14 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) close(r1) 22:26:14 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x200000, 0x8, 0x2d, 0x17fd, 0xbf5, 0x7, 0x4, 0xffffffffffffffff, 0x464b9b82, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:14 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) close(r1) 22:26:14 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:14 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000080)={0x0, 0xff, 0x1, 0x0, 0x0, [{r0, 0x0, 0x200}]}) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:14 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x8, 0x0) socket$inet6(0xa, 0x802, 0x40) futimesat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0x7530}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:15 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000a80)) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 339.897775] 9pnet: Insufficient options for proto=fd 22:26:15 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(0xffffffffffffffff) 22:26:15 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40) r3 = dup2(r2, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000058000000700000000300000095169cacbc3f759250accd901780eb59c64971f372d7c1c0d15134f33f31d2c572dc6c2cf51dfa2ec6d0bea75feefa950b6d26c4453b8d0adb51723fa24923338699e228f7d87db8300bf13036e2dd53a0ca54aff228f00000010400005e48d1626d94f4dffeed2a1671b891898251356346f599749ff89646f98dc1287dc1dd708ac7df92f175d3633370a31c2140393028707a90b3ecbc4e1564b14471d748264677c72164efaf171f9183bf66ce0fd006381176cc17f09ee51eef73a3e50ae9f99fd7d470923a7ba4c300797c1052183af99cb30cef1ab42b0b4f8ae268ae7deedb1d7f67907e6d718a7cd5a7dcefffcb42e030ca8038ce8d05b33727b79bc69664c4633f8b862cbf8fc6ccc02033a06b3e6706daba95e8a9e08c3f7da7d96cbfbcf8004ac674fb6504ec52b563ab9156cbc6607b3c08b9d8efeccc6cb02c678d64ae4759cc234c16cdc8c8fc4e00"], &(0x7f00000000c0)=""/114, 0x16c, 0x72, 0x1}, 0x20) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f0000000080)=0x45e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:15 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:15 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x40880) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:15 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x80, 0x200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000600)=0x2c) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000003477723ddcf94477000000696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 340.094329] 9pnet: Insufficient options for proto=fd 22:26:15 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:15 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:15 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close(r0) 22:26:15 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xe055, 0x2000) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f00000000c0)={{0x2f, @rand_addr=0x6, 0x4e23, 0x1, 'lblcr\x00', 0x2, 0xfff, 0x3a}, {@multicast1, 0x4e20, 0x4, 0x5, 0x3, 0x6}}, 0x44) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:15 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @reserved}, 0x10, 0x800) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) [ 340.260067] 9pnet: Insufficient options for proto=fd 22:26:15 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd, 0x0, 0xea}) 22:26:15 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000780)) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000900)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x8000, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f00000004c0)) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RFSYNC(r1, &(0x7f0000000080)={0x7, 0x33, 0x1}, 0x7) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:15 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd, 0x0, 0xea}) 22:26:15 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:15 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x800) r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in, @in6=@mcast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000002c0)="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") ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:15 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e23, @rand_addr=0xd60}}) 22:26:15 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd, 0x0, 0xea}) 22:26:15 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:15 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:15 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:15 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r2) 22:26:15 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1ff, 0x48400) syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000180)=[{&(0x7f0000000100)="45b5e1d527bc71419b8158b9389c5a39c1b397a8488d77e7f302d4e7008e1e6355364a8f02c510a7f43d8370b1354bb013e7a4c06e65bcc8d97650516ebdfd345905fffa383e0beab8bb02d0d2185ddd0bb117321cfbcae9eabc3368b366751e3739897a0ddc6e62df64a90a73e2", 0x6e, 0x13}, {&(0x7f0000000280)="97d5644d18ea960cfa2a0c21342efb2588611204adfc73f52724fb23354760b6fbeed377a4f7ece63e87efe7cda93f63e5dc667c428082e7d44cea6ec8e5508280020a5c9ac21f719a1b504d2c4508a0a9fb2dccc6c8509a76a610e9d970bae5a0601dc5cd722c494996fec690676025b733971d8ebec9de3f33178d8dae9532ce016bd0dd92b0ccec04f53b8eeb136dd26e79dcc5621cdc2d8dd738a03bf6cc4247d393ce86508df91fe0a30b4b2d9860e193daa85792c899081836c30b121828e2edd9367da150ffdc1e362fa3d7133ab7b494cfb8ff3b6ba5e382d5a1", 0xde, 0x3c6507d6}], 0x20, &(0x7f00000001c0)='mime_type\x00') connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) [ 340.690587] FS-Cache: Duplicate cookie detected [ 340.695382] FS-Cache: O-cookie c=000000006e3e59c1 [p=00000000845ed810 fl=222 nc=0 na=1] [ 340.703637] FS-Cache: O-cookie d=00000000b0f58035 n=00000000dc3dfcb2 [ 340.710232] FS-Cache: O-key=[10] '34323934393731323230' [ 340.715717] FS-Cache: N-cookie c=00000000ae0e628a [p=00000000845ed810 fl=2 nc=0 na=1] [ 340.723820] FS-Cache: N-cookie d=00000000b0f58035 n=00000000768ee64a [ 340.730422] FS-Cache: N-key=[10] '34323934393731323230' [ 340.735904] FS-Cache: Duplicate cookie detected [ 340.740835] FS-Cache: O-cookie c=000000006e3e59c1 [p=00000000845ed810 fl=222 nc=0 na=1] [ 340.749076] FS-Cache: O-cookie d=00000000b0f58035 n=00000000dc3dfcb2 [ 340.749091] FS-Cache: O-key=[10] '34323934393731323230' [ 340.761297] FS-Cache: N-cookie c=000000009a928051 [p=00000000845ed810 fl=2 nc=0 na=1] [ 340.769348] FS-Cache: N-cookie d=00000000b0f58035 n=00000000178f6f10 [ 340.769357] FS-Cache: N-key=[10] '34323934393731323230' 22:26:15 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x0, 0x1f}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:15 executing program 2: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:15 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:15 executing program 1 (fault-call:5 fault-nth:0): r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:16 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:16 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r2) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="b2364ae34d8edfb2f5d46f94165e4a1e96652362e38f17b603d25d7a3155577721852a9b962f21b47dfb08", 0x2b, 0xfffffffffffffffb) r4 = request_key(&(0x7f0000000180)='syzkaller\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='security!nodev\x00', 0xfffffffffffffffa) keyctl$unlink(0x9, r3, r4) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x101002) 22:26:16 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x1ff, 0x0, 0x2, 0x5}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000000c0)={0x0, r4}) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) 22:26:16 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:16 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:16 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:16 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacf\x00', &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x51c, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}], [{@obj_role={'obj_role', 0x3d, '('}}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000a80)={0x184, 0x7d, 0x1, {0x0, 0x17d, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x13f, "76626f786e657431747275737465646c6f1d7178485cecb32f84a0c985d237d9e70c611400092ac391a86bd01e33cbb92b347c5dfed8364e2d5454c480bacaf608a490224075a43407adf4cd85fd433ff8ef97b4e2c38d49ecf4cb3e42d270adb63c7d1f1ddeeb461894e6e12a980851e44747a72699598fe23d682ac514da61f5246cd2df23cbbe200df992f09b64a2a023ac47413716973c17379f1675e9554bf341ff366e1933cb09952cefbd423567cfa02267f90b55a5147c6b9d49419c3c6e0f7ba274e8f9fd7bcf9688d361352b2586b94fd0e9b8d1e84be6d3e001d1b9ecbf48069c2d90e9942535a0412e62498b42a0ed1dbf8ad0942444a4d698c0dc07f945527aa6066a623782cdbc6fcb5679e9f9d023a63bc668b2353edfb4a68bf3a27b9b5962ba77a24a97e18fb5eb8950d1d81ea7f617fed67b4f6bcf7c"}}, 0x184) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x540e, 0x1, 0x3, 0x81, 0x1}) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:16 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:16 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) r2 = accept4(r0, &(0x7f0000000080)=@ipx, &(0x7f0000000100)=0x80, 0x80800) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000002c0)={@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, {&(0x7f0000000140)=""/118, 0x76}, &(0x7f00000001c0)}, 0xa0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) close(r1) 22:26:16 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) 22:26:16 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x0, @remote, 0x1}}, 0x1, 0xfc}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000180)=r3, 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:16 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:16 executing program 2: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x7fe) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x401000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001580)={[{@discard='discard'}]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrusage(0x0, &(0x7f0000000a80)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d48e4c28ed2cbde0b7b5b64699ebce454e6d99aa0981c9f3f05d050813a6ec019980c7af69e551a2ad0bb1bb9915c1bb53d8fe92652311f06ee2c1cfe88a55df5eed7a17877", @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[{0xa, 0x8}, {0x0, 0x5}, {0x4, 0x80}, {0x8, 0x10000000}, {0x3, 0x8}], 0x5) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000004c0)={0xa43, 0x8000, 0x5, 0x9, 0x0}, &(0x7f0000000500)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000600)={0x7f, 0x0, 0x7fff, 0x1, r5}, 0x10) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1, {0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e}}, 0xa0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="61e2"]) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:16 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local}, &(0x7f0000000100)=0xc) bind$can_raw(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) read(r1, &(0x7f0000000080), 0x0) close(r2) 22:26:16 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:16 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x5, 0x0, 0x3ff, 0x9, 0x0, 0x8001, 0x400, 0xf, 0xff, 0x9, 0x8, 0x5, 0xff, 0xba3, 0x2, 0x79, 0xfed1, 0x7fff, 0x7, 0x0, 0x40, 0x4, 0x5, 0x10000, 0x1, 0x24ce, 0x8000, 0x3, 0x80000001, 0x0, 0x80000001, 0x3, 0x1e1d, 0x6, 0x1, 0xfffffffffffffff9, 0x0, 0x3, 0x2, @perf_config_ext={0x3, 0x9}, 0x3010, 0x6, 0x4, 0x7, 0x3, 0x321919f8, 0x6}, r2, 0x4, r1, 0x9) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x28800, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="000329bd7000fcdbdf2509000000080005000200000007"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000800) r7 = getgid() setgid(r7) ioctl$FS_IOC_FSSETXATTR(r4, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:16 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000000c0)={{0x2, 0x0, 0x200, 0x2, 0x3}, 0x6, 0x7fffffff, 'id1\x00', 'timer0\x00', 0x0, 0x8, 0x7457, 0x80, 0x5}) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r2) [ 341.594601] 9pnet: Insufficient options for proto=fd 22:26:16 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:16 executing program 4 (fault-call:14 fault-nth:0): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:16 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x20000, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e20, 0x3, @mcast1, 0x8}}, 0x0, 0x9, 0x3, "bb7ad168966c00fb9fa83c8cbfc6f3569f66dc8a236cd83eaff2c565afebfc92353a2e93a00158d480372030bfbf67cd84c87c3bb63fa942cb34d64c36c387e1263979e7ffcd960afab770b7d1f6f0c2"}, 0xd8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) r4 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r4, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000180)=""/108, 0x1a2}, {&(0x7f0000000500)=""/65, 0x41}, {&(0x7f0000000580)=""/250, 0xfa}], 0x10000000000001aa, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380)=0x2, 0x4) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c227ff3f7885ba14d17b5ff4f4f0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000003be9246e3b9bf74358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50200000090b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x200) close(r2) [ 341.650139] 9pnet: Insufficient options for proto=fd [ 341.657446] XFS (loop2): Invalid superblock magic number [ 341.741231] 9pnet: Insufficient options for proto=fd [ 341.782161] FAULT_INJECTION: forcing a failure. [ 341.782161] name failslab, interval 1, probability 0, space 0, times 0 [ 341.791278] 9pnet: Insufficient options for proto=fd [ 341.806550] CPU: 0 PID: 13590 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 341.813955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.823322] Call Trace: [ 341.825929] dump_stack+0x1c4/0x2b4 [ 341.829577] ? dump_stack_print_info.cold.2+0x52/0x52 [ 341.829597] ? graph_lock+0x170/0x170 [ 341.829620] should_fail.cold.4+0xa/0x17 [ 341.829640] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 341.829653] ? __lock_acquire+0x7ec/0x4ec0 [ 341.829672] ? graph_lock+0x170/0x170 [ 341.829691] ? _parse_integer+0x134/0x180 [ 341.838776] ? graph_lock+0x170/0x170 [ 341.863945] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 341.869498] ? _kstrtoull+0x188/0x250 [ 341.873326] ? _parse_integer+0x180/0x180 [ 341.877494] ? find_held_lock+0x36/0x1c0 [ 341.881598] ? ___might_sleep+0x1ed/0x300 [ 341.885763] ? check_preemption_disabled+0x48/0x200 [ 341.890803] ? arch_local_save_flags+0x40/0x40 [ 341.895407] __should_failslab+0x124/0x180 [ 341.899654] should_failslab+0x9/0x14 [ 341.903460] kmem_cache_alloc+0x2be/0x730 [ 341.907613] ? lock_downgrade+0x900/0x900 [ 341.911772] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 341.917322] getname_flags+0xd0/0x5a0 [ 341.921434] do_renameat2+0x319/0x1180 [ 341.925327] ? find_held_lock+0x36/0x1c0 [ 341.929395] ? kasan_check_write+0x14/0x20 [ 341.933644] ? wait_for_completion+0x8a0/0x8a0 [ 341.938233] ? user_path_create+0x40/0x40 [ 341.942390] ? __lock_is_held+0xb5/0x140 [ 341.946462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.952007] ? check_preemption_disabled+0x48/0x200 [ 341.957039] ? __sb_end_write+0xd9/0x110 [ 341.961112] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 341.966654] ? fput+0x130/0x1a0 [ 341.969946] ? do_syscall_64+0x9a/0x820 [ 341.973928] ? do_syscall_64+0x9a/0x820 [ 341.977912] ? lockdep_hardirqs_on+0x421/0x5c0 [ 341.982503] ? trace_hardirqs_on+0xbd/0x310 [ 341.986836] ? __ia32_sys_read+0xb0/0xb0 [ 341.990908] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 341.996286] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 342.001752] __x64_sys_rename+0x5e/0x80 [ 342.005749] do_syscall_64+0x1b9/0x820 [ 342.009642] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 342.015015] ? syscall_return_slowpath+0x5e0/0x5e0 [ 342.019953] ? trace_hardirqs_on_caller+0x310/0x310 [ 342.024991] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 342.030022] ? recalc_sigpending_tsk+0x180/0x180 [ 342.034786] ? kasan_check_write+0x14/0x20 [ 342.039033] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 342.043890] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.049082] RIP: 0033:0x457579 [ 342.052280] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 342.071194] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 22:26:16 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000080)="624a900cbcf7edc2733ed1d70f7c3601f299b18df48187480d4eabe1383887828ec224c067d69fb4d6954a81e3c8bf4da4f637a322f6994e3e525b505a139adbaa9bfff48f82664685d684fedd9e088632a5ef32062a7ef537d3d3862379d3780a771f4352da0001ee44c01620d481fbf0b0783fd4210eef55600495f356bd2409406026f296a40db0b9a9c5718dabba436c6c9bd08bbcd6545d7adc1df5c9b2f8cffe153bded0161ddbea6e5a025fa3", 0xb0}], 0x2, 0xc) close(r0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x40400, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000001c0)={0x4a, 0x1f}) 22:26:17 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:17 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x8, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f00000002c0)) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x109000, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x100, 0x400100) acct(&(0x7f0000000200)='./file0\x00') ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pread64(r2, &(0x7f0000000300)=""/119, 0x77, 0x0) close(r0) getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000080)=""/111, &(0x7f0000000100)=0x6f) 22:26:17 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x10000000000, 0x8000000000000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000}, 0x0, 0x0, r1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)={0x6, 0x0, [{0x26020453, 0x3, 0x0, 0x0, @msi={0x5, 0x3, 0x4}}, {0x7, 0x4, 0x0, 0x0, @irqchip={0xcc, 0x40}}, {0x200, 0x4, 0x0, 0x0, @adapter={0x8, 0x10001, 0x4, 0x9, 0x100000001}}, {0x9, 0x4, 0x0, 0x0, @irqchip={0x7ff, 0xa5}}, {0x97b, 0x2, 0x0, 0x0, @adapter={0x0, 0x8, 0x10001, 0x800, 0x100000001}}, {0xcb, 0x6, 0x0, 0x0, @irqchip={0x7, 0xfffffffffffffffc}}]}) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000040)={0x1fffd}) [ 342.078929] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 342.086208] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 342.093490] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 342.100767] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 342.108043] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:17 executing program 4 (fault-call:14 fault-nth:1): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:17 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x30000, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000340)) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:17 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:17 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x800000000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) accept(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000100)=0x80) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x1, 0xfffffffffffff3c4, 0x1, 0xaad, 0x6}, 0x14) 22:26:17 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000040)={0x1fffd}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0xab, 0x400, 0xb1a5, 0x5, 0x0, 0x3, 0x600, 0x0, 0x2, 0x1, 0x0, 0x1, 0x7, 0x9, 0x6, 0x2400000000000, 0x3f, 0x0, 0x7, 0x9, 0x7, 0xffffffffffffffe0, 0x81, 0x400, 0x2048, 0x80000000, 0x20, 0x9, 0x800, 0x400, 0x5, 0x2, 0x404b, 0x220, 0x8000, 0x5, 0x0, 0x8, 0x0, @perf_config_ext={0x8000, 0xfffffffffffffff7}, 0x8, 0x9, 0x2, 0x0, 0x7, 0x1, 0x91a}, r4, 0xa, r1, 0x9) 22:26:17 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xffffffff, 0x40000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000600)={0x0, 0x3}, &(0x7f0000000640)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000780)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000a80)={0x8, 0x120, 0xfa00, {0x4, {0x5, 0xcda, "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", 0x6f, 0x2, 0x1ff, 0x5, 0x1, 0x27b000, 0x5}, r3}}, 0x128) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000180)) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000940)=ANY=[@ANYRES32=0x0], 0xfffffffffffffdc7) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000c40)={0x3, 0x3}) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r2, &(0x7f0000000400)={0xb, 0x77, 0x20040001, 0x3}, 0xb) setsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000340)={@multicast1, @local, @multicast1}, 0xc) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000900)) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000980)={0x1a, "c91c72a49d7d7564bdebd65545f6d08fed7c6e9307dd63e71f02"}) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000c80)={0x5, 0x0, 0x313b, 0xa107a11043b9be03}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') write$P9_RREADDIR(r2, &(0x7f0000000bc0)={0x7a, 0x29, 0x1, {0x1, [{{0x4, 0x0, 0x4}, 0x1, 0x6, 0x13, './file0/file0/file0'}, {{0x50, 0x3, 0x3}, 0x1ff, 0x1, 0xd, './file0/file1'}, {{0xa, 0x2, 0x1}, 0x3ff, 0x401, 0x7, './file0'}]}}, 0x7a) [ 342.434099] 9pnet: Insufficient options for proto=fd [ 342.455445] FAULT_INJECTION: forcing a failure. [ 342.455445] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.467296] CPU: 0 PID: 13624 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 342.467309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.467316] Call Trace: [ 342.467344] dump_stack+0x1c4/0x2b4 [ 342.467369] ? dump_stack_print_info.cold.2+0x52/0x52 [ 342.486678] ? __lock_acquire+0x7ec/0x4ec0 [ 342.486708] should_fail.cold.4+0xa/0x17 [ 342.486729] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 342.508970] ? __lock_acquire+0x7ec/0x4ec0 [ 342.513242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.518796] ? check_preemption_disabled+0x48/0x200 [ 342.518824] ? mark_held_locks+0x130/0x130 [ 342.518844] ? mark_held_locks+0x130/0x130 [ 342.518857] ? perf_trace_lock_acquire+0x15b/0x800 [ 342.518884] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.518900] ? check_preemption_disabled+0x48/0x200 [ 342.518925] ? debug_smp_processor_id+0x1c/0x20 22:26:17 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 342.532428] ? perf_trace_lock_acquire+0x15b/0x800 [ 342.532449] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.532467] ? should_fail+0x22d/0xd01 [ 342.532492] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 342.542972] __alloc_pages_nodemask+0x34b/0xde0 [ 342.542991] ? _parse_integer+0x134/0x180 [ 342.543012] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 342.586003] ? _parse_integer+0x180/0x180 [ 342.590182] ? find_held_lock+0x36/0x1c0 [ 342.594291] ? ___might_sleep+0x1ed/0x300 [ 342.598462] ? trace_hardirqs_off+0xb8/0x310 [ 342.602886] cache_grow_begin+0x91/0x8c0 [ 342.607470] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 342.613035] ? check_preemption_disabled+0x48/0x200 [ 342.618070] kmem_cache_alloc+0x665/0x730 [ 342.622233] ? lock_downgrade+0x900/0x900 [ 342.626420] getname_flags+0xd0/0x5a0 [ 342.630243] do_renameat2+0x319/0x1180 [ 342.634162] ? find_held_lock+0x36/0x1c0 [ 342.638240] ? kasan_check_write+0x14/0x20 [ 342.642502] ? wait_for_completion+0x8a0/0x8a0 [ 342.647124] ? user_path_create+0x40/0x40 [ 342.651304] ? __lock_is_held+0xb5/0x140 [ 342.655382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.660924] ? check_preemption_disabled+0x48/0x200 [ 342.665935] ? __sb_end_write+0xd9/0x110 [ 342.669989] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 342.675528] ? fput+0x130/0x1a0 [ 342.678816] ? do_syscall_64+0x9a/0x820 [ 342.682793] ? do_syscall_64+0x9a/0x820 [ 342.686769] ? lockdep_hardirqs_on+0x421/0x5c0 [ 342.691368] ? trace_hardirqs_on+0xbd/0x310 [ 342.695717] ? __ia32_sys_read+0xb0/0xb0 [ 342.699803] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.705189] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 342.710710] __x64_sys_rename+0x5e/0x80 [ 342.714698] do_syscall_64+0x1b9/0x820 [ 342.718576] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 342.723951] ? syscall_return_slowpath+0x5e0/0x5e0 [ 342.728878] ? trace_hardirqs_on_caller+0x310/0x310 [ 342.733911] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 342.738933] ? recalc_sigpending_tsk+0x180/0x180 [ 342.743703] ? kasan_check_write+0x14/0x20 [ 342.747937] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 342.752801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.757983] RIP: 0033:0x457579 [ 342.761182] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 342.780077] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 342.787782] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 342.795061] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 22:26:17 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'veth0\x00', {0x2, 0x4e20, @broadcast}}) 22:26:17 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x40140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) [ 342.802324] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 342.809594] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 342.816868] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:17 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:18 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x591) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x3, 0x0, 0x4}}, 0x2e) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0xffffffffffffff69) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:18 executing program 4 (fault-call:14 fault-nth:2): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:18 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0xc5, 0x8000) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x880, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) 22:26:18 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x101100, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:18 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:18 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000080)=0x4) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000040)={0x1fffd}) [ 343.084556] FAULT_INJECTION: forcing a failure. [ 343.084556] name failslab, interval 1, probability 0, space 0, times 0 [ 343.098336] CPU: 0 PID: 13663 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 343.105725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.115091] Call Trace: [ 343.117706] dump_stack+0x1c4/0x2b4 [ 343.121361] ? dump_stack_print_info.cold.2+0x52/0x52 [ 343.126578] ? find_held_lock+0x36/0x1c0 [ 343.130671] should_fail.cold.4+0xa/0x17 [ 343.134768] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 343.139893] ? unlazy_walk+0x1b8/0x550 [ 343.143791] ? graph_lock+0x170/0x170 [ 343.147597] ? lock_downgrade+0x900/0x900 [ 343.151761] ? check_preemption_disabled+0x48/0x200 [ 343.156793] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 343.162600] ? kasan_check_read+0x11/0x20 [ 343.166755] ? dput.part.26+0x26d/0x790 [ 343.170748] ? find_held_lock+0x36/0x1c0 [ 343.174844] ? ___might_sleep+0x1ed/0x300 [ 343.179006] ? arch_local_save_flags+0x40/0x40 [ 343.183596] ? filename_parentat.isra.56+0x424/0x570 [ 343.188709] ? getname+0x20/0x20 [ 343.192098] __should_failslab+0x124/0x180 [ 343.196346] should_failslab+0x9/0x14 [ 343.200168] kmem_cache_alloc+0x2be/0x730 [ 343.204341] getname_flags+0xd0/0x5a0 [ 343.208179] do_renameat2+0x37d/0x1180 [ 343.212076] ? find_held_lock+0x36/0x1c0 [ 343.216170] ? kasan_check_write+0x14/0x20 [ 343.220432] ? wait_for_completion+0x8a0/0x8a0 [ 343.225024] ? user_path_create+0x40/0x40 [ 343.229192] ? __lock_is_held+0xb5/0x140 [ 343.233272] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.238820] ? check_preemption_disabled+0x48/0x200 [ 343.243867] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 343.249411] ? fput+0x130/0x1a0 [ 343.252736] ? do_syscall_64+0x9a/0x820 [ 343.256716] ? do_syscall_64+0x9a/0x820 [ 343.260705] ? trace_hardirqs_on+0xbd/0x310 [ 343.265034] ? __ia32_sys_read+0xb0/0xb0 [ 343.269108] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.274484] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 343.279956] __x64_sys_rename+0x5e/0x80 [ 343.283947] do_syscall_64+0x1b9/0x820 [ 343.287841] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 343.293225] ? syscall_return_slowpath+0x5e0/0x5e0 [ 343.298180] ? trace_hardirqs_on_caller+0x310/0x310 [ 343.303218] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 343.308244] ? recalc_sigpending_tsk+0x180/0x180 [ 343.313026] ? kasan_check_write+0x14/0x20 [ 343.317282] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 343.322148] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.327361] RIP: 0033:0x457579 [ 343.330564] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 343.349477] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 343.357209] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 343.364487] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 343.371768] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 22:26:18 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) sysfs$3(0x3) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9fb2"]) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/autofs\x00', 0x40100, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000d40)={0x0, 0xad}, &(0x7f0000000d80)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000dc0)={r3, 0xa8, "5bfb174943c08dbf01748b0134495f81c497a818ec61aad95dbf5eb039f9bd9a84cffd0e5f4598761c8827b3bd1c6ab3540493045519f9c742e2a3362e288d2e3966cf40e1cd894118d47521abb1ff76cbb8ddd3cbee79dcb20ea55a45c0eea1d6f35708cb58fe5240b1abdc14506a2cf061c664a62621e60103803f129351ca5a7dfb8232c976b273fff8f5aab672f1a95d0d36660f28ffbba259b7c3fea2eef4974eadb0b4a82a"}, &(0x7f0000000e80)=0xb0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f00000007c0)={&(0x7f0000000600)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000a80)=""/252, 0xfc}, {&(0x7f0000000900)=""/135, 0x87}, {&(0x7f0000000b80)=""/251, 0xfb}], 0x4, &(0x7f0000000c80)=""/72, 0x48, 0x3}, 0x100) [ 343.379064] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 343.386344] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:18 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) accept4(r0, 0x0, &(0x7f0000000080), 0x80800) 22:26:18 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r3, 0x5}}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x3, r4}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(0xffffffffffffffff) fadvise64(r2, 0x0, 0x0, 0x1) 22:26:18 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:18 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x4000000000000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) [ 343.555809] 9pnet: Insufficient options for proto=fd 22:26:18 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x200) write$nbd(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="6744669801000000000003000300000019d533951edb48f35678c4e96b78a90b8d254dfea8f40840b84792d2e5acd52a"], 0x3c) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:18 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffff7fffffff, 0x10000) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x9, [0x9, 0x7fffffff, 0x8, 0x7fffffff, 0x893, 0x3, 0x8, 0x401, 0x7]}, &(0x7f00000000c0)=0x16) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000040)={0x1fffd}) [ 343.598980] 9pnet: Insufficient options for proto=fd 22:26:18 executing program 4 (fault-call:14 fault-nth:3): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:18 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a0000002901000000000000000000000000000000"], 0x15) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:18 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0xffffffffffffffff) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:18 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7f, 0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x5, 0x7}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000640)={r3, 0x4}, &(0x7f0000000780)=0x8) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$binfmt_aout(r0, &(0x7f0000000a80)={{0x0, 0x100000001, 0x9, 0x182, 0x33b, 0x8cd, 0x2a7, 0x101}, "7601e54a45e2559876449d4b12786ca63bfa9ce0532881346b5e89b1f69b7eea02a7ce65bf0f36b9f963899bb8e72c3ab3d8f9cd00e632624bb8f614278afb4eed280ca593dd50ba099948498c44c0236233933e5468bbc5b62e549736813bc991befe33cec4ad83a9d6496cae9f68823fbf7e2b2e81b72b3de011b94dbb7b4022722d88c8f52d6ef62b48e7459eb987d7e80bcfa929196b0549171b253ae1e992f37f465d79d6e81297a02ca326868256963c83fdda2074e76bbfa6a6863055bbb08bee33", [[], [], [], [], [], [], [], [], [], []]}, 0xae5) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:18 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x80000001, 0x400) close(r1) [ 343.820533] FAULT_INJECTION: forcing a failure. [ 343.820533] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 343.832403] CPU: 1 PID: 13714 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 343.839777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.849141] Call Trace: [ 343.851765] dump_stack+0x1c4/0x2b4 [ 343.855422] ? dump_stack_print_info.cold.2+0x52/0x52 [ 343.860663] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 343.866146] should_fail.cold.4+0xa/0x17 [ 343.870237] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 343.875353] ? debug_smp_processor_id+0x1c/0x20 [ 343.880042] ? perf_trace_lock_acquire+0x15b/0x800 [ 343.885072] ? make_kprojid+0x30/0x30 [ 343.888898] ? mark_held_locks+0x130/0x130 [ 343.893135] ? from_kgid+0x87/0xc0 [ 343.896689] ? graph_lock+0x170/0x170 [ 343.900498] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.906048] ? security_capable+0x99/0xc0 [ 343.910215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.915763] ? graph_lock+0x170/0x170 [ 343.919577] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.925131] ? check_preemption_disabled+0x48/0x200 [ 343.930186] ? debug_smp_processor_id+0x1c/0x20 [ 343.934879] ? perf_trace_lock_acquire+0x15b/0x800 [ 343.939821] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.945371] ? should_fail+0x22d/0xd01 [ 343.949271] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 343.954403] __alloc_pages_nodemask+0x34b/0xde0 [ 343.959081] ? lock_downgrade+0x900/0x900 [ 343.963252] ? check_preemption_disabled+0x48/0x200 [ 343.968290] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 343.973320] ? dput.part.26+0x26d/0x790 [ 343.977314] ? find_held_lock+0x36/0x1c0 [ 343.981408] ? ___might_sleep+0x1ed/0x300 [ 343.985570] ? trace_hardirqs_off+0xb8/0x310 [ 343.989994] cache_grow_begin+0x91/0x8c0 [ 343.994071] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 343.999621] ? check_preemption_disabled+0x48/0x200 [ 344.004655] kmem_cache_alloc+0x665/0x730 [ 344.008911] getname_flags+0xd0/0x5a0 [ 344.012728] do_renameat2+0x37d/0x1180 [ 344.016617] ? find_held_lock+0x36/0x1c0 [ 344.020689] ? kasan_check_write+0x14/0x20 [ 344.025201] ? wait_for_completion+0x8a0/0x8a0 [ 344.029797] ? user_path_create+0x40/0x40 [ 344.033954] ? __lock_is_held+0xb5/0x140 [ 344.038027] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.043589] ? check_preemption_disabled+0x48/0x200 [ 344.048633] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 344.054187] ? fput+0x130/0x1a0 [ 344.057476] ? do_syscall_64+0x9a/0x820 [ 344.061457] ? do_syscall_64+0x9a/0x820 [ 344.065445] ? trace_hardirqs_on+0xbd/0x310 [ 344.069776] ? __ia32_sys_read+0xb0/0xb0 [ 344.073843] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.079222] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 344.084697] __x64_sys_rename+0x5e/0x80 [ 344.088683] do_syscall_64+0x1b9/0x820 [ 344.092579] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 344.097966] ? syscall_return_slowpath+0x5e0/0x5e0 [ 344.102926] ? trace_hardirqs_on_caller+0x310/0x310 [ 344.107960] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 344.112987] ? recalc_sigpending_tsk+0x180/0x180 [ 344.117753] ? kasan_check_write+0x14/0x20 [ 344.122005] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 344.126870] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.132068] RIP: 0033:0x457579 [ 344.135269] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 344.154189] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 344.161920] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 344.169206] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 344.176488] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 344.183770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 344.191059] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:19 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a0000002901000000000000000000000000000000"], 0x15) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:19 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x2002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000140)) getsockname$netlink(r2, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'gretap0\x00', 0x8}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) tee(r0, r0, 0x0, 0x4) 22:26:19 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0xfffffffffffffdff, 0x3, 0x80000000, 0x2, 0x4}}) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:19 executing program 4 (fault-call:14 fault-nth:4): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:19 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) seccomp(0x0, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0x4, 0x40, 0x1fffffffc00000}, {0x3, 0xe41, 0x200, 0x2}]}) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:19 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="07a83d7d2c6e00000000abc0000000"]) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) mount$9p_fd(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000900)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@uid_lt={'uid<', r2}}, {@euid_eq={'euid', 0x3d, r2}}, {@uid_lt={'uid<', r2}}, {@smackfsroot={'smackfsroot', 0x3d, 'wfdno'}}, {@context={'context', 0x3d, 'sysadm_u'}}]}}) write$P9_RREADDIR(r1, &(0x7f0000000600)={0x74, 0x29, 0x1, {0x7f, [{{0x40, 0x2, 0x6}, 0x7, 0x10001, 0x7, './file0'}, {{0x18, 0x4, 0x3}, 0xfff, 0x4, 0x7, './file1'}, {{0x60, 0x1}, 0x81, 0x45, 0x13, './file0/file0/file0'}]}}, 0x74) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:19 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a0000002901000000000000000000000000000000"], 0x15) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:19 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) socketpair(0x11, 0x4, 0x40, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) [ 344.493582] FAULT_INJECTION: forcing a failure. [ 344.493582] name failslab, interval 1, probability 0, space 0, times 0 [ 344.534503] CPU: 0 PID: 13749 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 344.541915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.551279] Call Trace: [ 344.551311] dump_stack+0x1c4/0x2b4 [ 344.551334] ? dump_stack_print_info.cold.2+0x52/0x52 [ 344.551366] should_fail.cold.4+0xa/0x17 [ 344.551389] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 344.551410] ? debug_smp_processor_id+0x1c/0x20 [ 344.551426] ? perf_trace_lock_acquire+0x15b/0x800 [ 344.551440] ? graph_lock+0x170/0x170 [ 344.551460] ? graph_lock+0x170/0x170 [ 344.576636] ? perf_trace_lock+0x7a0/0x7a0 [ 344.576653] ? mark_held_locks+0x130/0x130 [ 344.576678] ? find_held_lock+0x36/0x1c0 [ 344.576697] ? __lock_is_held+0xb5/0x140 [ 344.590399] 9pnet: Insufficient options for proto=fd [ 344.593457] ? ___might_sleep+0x1ed/0x300 [ 344.593476] ? arch_local_save_flags+0x40/0x40 [ 344.593503] __should_failslab+0x124/0x180 [ 344.614030] 9pnet: Insufficient options for proto=fd [ 344.615080] should_failslab+0x9/0x14 [ 344.615100] kmem_cache_alloc+0x2be/0x730 [ 344.615126] __d_alloc+0xc8/0xcc0 [ 344.615145] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 344.645578] ? d_alloc_parallel+0x1f40/0x1f40 [ 344.650087] ? d_lookup+0x269/0x340 [ 344.653727] ? d_lookup+0x269/0x340 [ 344.657369] ? lockdep_hardirqs_on+0x421/0x5c0 [ 344.661956] ? lock_rename+0x236/0x290 [ 344.665841] ? lookup_dcache+0x22/0x140 [ 344.669830] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 344.675300] ? lock_release+0x970/0x970 [ 344.679313] ? arch_local_save_flags+0x40/0x40 22:26:19 executing program 2: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000600)={0x7, 0x4d, 0xfffffffffffffffb}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[], 0x33d) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:19 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x3, 0x3, 0x100000000, 0x4}}) getgroups(0x5, &(0x7f0000000040)=[0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0xee00]) r3 = getgid() setregid(r2, r3) fstat(r0, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000200)=""/67, 0x43}, &(0x7f00000002c0), 0x1}, 0x20) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) [ 344.683915] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 344.689413] d_alloc+0x96/0x380 [ 344.692705] ? __d_lookup+0x9e0/0x9e0 [ 344.696528] ? __d_alloc+0xcc0/0xcc0 [ 344.700259] ? lock_rename+0x236/0x290 [ 344.704193] __lookup_hash+0xd9/0x190 [ 344.708012] do_renameat2+0x6c1/0x1180 [ 344.711935] ? user_path_create+0x40/0x40 [ 344.716102] ? __lock_is_held+0xb5/0x140 [ 344.720192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.725751] ? check_preemption_disabled+0x48/0x200 22:26:19 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000100)="15a71fa4930569b772b7c913261e76916bc3c58ad98a2a3644fbd29a3afcd023d624f89f9ce1ba8155923c62d6574617b985aaa2cb84556b5b271e96ea6f58cc95621026c70f9535f10e1896fcb09972017a7d6421a9a4") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x2, 0x0, 0x0, 0x0, 0x5}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) [ 344.730804] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 344.736369] ? do_syscall_64+0x9a/0x820 [ 344.740359] ? do_syscall_64+0x9a/0x820 [ 344.744352] ? trace_hardirqs_on+0xbd/0x310 [ 344.748693] ? __ia32_sys_read+0xb0/0xb0 [ 344.752779] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.758182] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 344.763660] __x64_sys_rename+0x5e/0x80 [ 344.767660] do_syscall_64+0x1b9/0x820 [ 344.771568] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 344.776955] ? syscall_return_slowpath+0x5e0/0x5e0 [ 344.781903] ? trace_hardirqs_on_caller+0x310/0x310 [ 344.786942] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 344.791986] ? recalc_sigpending_tsk+0x180/0x180 [ 344.796758] ? kasan_check_write+0x14/0x20 [ 344.801013] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 344.805885] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.811090] RIP: 0033:0x457579 [ 344.814293] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:26:19 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000600)={0x43, 0x9, 0x1, {0x10000000}}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77667867b83e", @ANYRESHEX=r1, @ANYBLOB=',\x00']) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:19 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x801000000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x400) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) [ 344.833732] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 344.841476] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 344.848763] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 344.856055] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 344.856065] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 344.856073] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:20 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a00000029010000000000000000000000000000000000000000000000000000"], 0x20) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:20 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:20 executing program 4 (fault-call:14 fault-nth:5): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:20 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) socket$inet_udplite(0x2, 0x2, 0x88) [ 344.999069] 9pnet: Insufficient options for proto=fd [ 345.017958] 9pnet: Insufficient options for proto=fd 22:26:20 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="743d00000000001367e276aba0beeff079d9524c1f3b36ac4bcafc59f53522de29d89b305c003cfa0500ed877d9a7010331840283c4bc08533dd6709c7000000000000000000000000bee597c644201dce699064e7decc19347f830006e971ee48698b31d5cda17012be76dfaf6b38cda3cf5e477483ceb63b6a3cf625aea28e16e11bb7544b759c775f9c88cc5bb47e8a", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff80, 0x0, 0x0, 0x2}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) lstat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, r2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8}}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) pipe2$9p(&(0x7f0000000340), 0x800) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x4, 0x200000) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000004c0)={0x3, 0x9, {0x53, 0x1f, 0x0, {0x7, 0xffffffff}, {0x8000, 0x1}, @rumble={0x4, 0x3}}, {0x55, 0x4, 0x0, {0xfffffffffffffffa, 0x4}, {0xe19, 0x1f}, @period={0x5c, 0x4, 0x2, 0xffffffffffffff80, 0x860e, {0x6, 0x9, 0x80000000, 0x3}, 0x6, &(0x7f0000000240)=[0xc99e, 0x7, 0x4, 0x8001, 0x19f, 0xc5a]}}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:20 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a00000029010000000000000000000000000000000000000000000000000000"], 0x20) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 345.123065] FAULT_INJECTION: forcing a failure. [ 345.123065] name failslab, interval 1, probability 0, space 0, times 0 [ 345.173414] CPU: 1 PID: 13808 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 345.180813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.180821] Call Trace: [ 345.180851] dump_stack+0x1c4/0x2b4 [ 345.180880] ? dump_stack_print_info.cold.2+0x52/0x52 [ 345.201689] should_fail.cold.4+0xa/0x17 [ 345.205779] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 345.210911] ? graph_lock+0x170/0x170 [ 345.214728] ? kasan_kmalloc+0xc7/0xe0 [ 345.218633] ? graph_lock+0x170/0x170 [ 345.222444] ? d_alloc+0x96/0x380 [ 345.225917] ? graph_lock+0x170/0x170 [ 345.229781] ? find_held_lock+0x36/0x1c0 [ 345.233863] ? __lock_is_held+0xb5/0x140 [ 345.237955] ? ___might_sleep+0x1ed/0x300 [ 345.242118] ? arch_local_save_flags+0x40/0x40 [ 345.246720] ? lock_downgrade+0x900/0x900 [ 345.250900] __should_failslab+0x124/0x180 [ 345.255161] should_failslab+0x9/0x14 [ 345.258977] kmem_cache_alloc_trace+0x2d7/0x750 [ 345.263660] ? do_raw_spin_lock+0xc1/0x200 [ 345.267950] p9_fid_create+0x49/0x2b0 [ 345.271787] p9_client_walk+0x124/0xb30 [ 345.275785] ? __update_load_avg_se+0x311/0xb90 [ 345.280480] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 345.286123] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 345.291170] ? d_alloc+0x28b/0x380 [ 345.294730] ? lock_downgrade+0x86c/0x900 [ 345.298894] ? v9fs_fid_add+0x240/0x240 [ 345.302885] ? kasan_check_read+0x11/0x20 [ 345.307054] ? do_raw_spin_unlock+0xa7/0x2f0 [ 345.311571] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 345.316192] v9fs_vfs_lookup+0x1f7/0x4a0 [ 345.320266] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 345.324506] ? d_alloc+0x290/0x380 [ 345.328936] ? v9fs_vfs_create+0x130/0x130 [ 345.333195] ? lock_rename+0x236/0x290 [ 345.337136] __lookup_hash+0x12e/0x190 [ 345.341065] do_renameat2+0x6c1/0x1180 [ 345.344990] ? user_path_create+0x40/0x40 [ 345.349163] ? __lock_is_held+0xb5/0x140 [ 345.353255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.358808] ? check_preemption_disabled+0x48/0x200 [ 345.363859] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 345.369412] ? do_syscall_64+0x9a/0x820 [ 345.373395] ? do_syscall_64+0x9a/0x820 [ 345.377384] ? trace_hardirqs_on+0xbd/0x310 [ 345.381723] ? __ia32_sys_read+0xb0/0xb0 [ 345.385799] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.391206] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 345.396688] __x64_sys_rename+0x5e/0x80 [ 345.400681] do_syscall_64+0x1b9/0x820 [ 345.404579] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 345.409961] ? syscall_return_slowpath+0x5e0/0x5e0 [ 345.414906] ? trace_hardirqs_on_caller+0x310/0x310 [ 345.419938] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 345.424963] ? recalc_sigpending_tsk+0x180/0x180 [ 345.429744] ? kasan_check_write+0x14/0x20 [ 345.434014] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 345.438883] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.444090] RIP: 0033:0x457579 [ 345.447292] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.466220] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 22:26:20 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:20 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) [ 345.473957] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 345.481241] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 345.488523] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 345.495810] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 345.503115] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:20 executing program 4 (fault-call:14 fault-nth:6): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:20 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a00000029010000000000000000000000000000000000000000000000000000"], 0x20) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:20 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @loopback, 0x8f}, 0x1c) acct(&(0x7f00000000c0)='./file0\x00') ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:20 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x4, 0x101) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) socket$key(0xf, 0x3, 0x2) close(r2) 22:26:20 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x410080, 0x0) connect$pptp(r2, &(0x7f0000000340)={0x18, 0x2, {0x1}}, 0x1e) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:20 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f"], 0x25) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:20 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x2a080) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) r2 = dup3(r0, r1, 0x80000) ioctl$TIOCSTI(r2, 0x5412, 0x3) [ 345.821608] FS-Cache: Duplicate cookie detected [ 345.826413] FS-Cache: O-cookie c=00000000aba15e25 [p=00000000845ed810 fl=222 nc=0 na=1] [ 345.834803] FS-Cache: O-cookie d=00000000b0f58035 n=0000000009dae789 [ 345.841397] FS-Cache: O-key=[10] '34323934393731373333' [ 345.846884] FS-Cache: N-cookie c=00000000c77e9272 [p=00000000845ed810 fl=2 nc=0 na=1] [ 345.854957] FS-Cache: N-cookie d=00000000b0f58035 n=0000000095c15fc3 [ 345.861522] FS-Cache: N-key=[10] '34323934393731373333' [ 345.892179] FAULT_INJECTION: forcing a failure. [ 345.892179] name failslab, interval 1, probability 0, space 0, times 0 [ 345.903440] CPU: 0 PID: 13844 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 345.910819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.920192] Call Trace: [ 345.922804] dump_stack+0x1c4/0x2b4 [ 345.926462] ? dump_stack_print_info.cold.2+0x52/0x52 [ 345.931683] ? find_held_lock+0x36/0x1c0 [ 345.935776] should_fail.cold.4+0xa/0x17 [ 345.939858] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 345.939875] ? check_noncircular+0x20/0x20 [ 345.939893] ? print_usage_bug+0xc0/0xc0 [ 345.939912] ? ima_match_policy+0x848/0x1560 [ 345.939928] ? graph_lock+0x170/0x170 [ 345.939952] ? print_usage_bug+0xc0/0xc0 [ 345.949295] ? __lock_acquire+0x7ec/0x4ec0 [ 345.949317] ? graph_lock+0x170/0x170 [ 345.949330] ? graph_lock+0x170/0x170 [ 345.949351] ? print_usage_bug+0xc0/0xc0 [ 345.949376] __should_failslab+0x124/0x180 [ 345.949392] should_failslab+0x9/0x14 [ 345.949408] kmem_cache_alloc+0x47/0x730 [ 345.949436] radix_tree_node_alloc.constprop.18+0x1f7/0x370 [ 345.957891] radix_tree_extend+0x294/0x660 [ 345.957916] ? radix_tree_node_alloc.constprop.18+0x370/0x370 [ 346.009543] ? kernel_text_address+0x79/0xf0 [ 346.009561] ? __kernel_text_address+0xd/0x40 [ 346.009579] ? unwind_get_return_address+0x61/0xa0 [ 346.009598] ? __save_stack_trace+0x8d/0xf0 [ 346.009622] idr_get_free+0x83d/0xec0 [ 346.009653] ? ida_pre_get+0x130/0x130 [ 346.009673] ? do_renameat2+0x6c1/0x1180 [ 346.009696] ? do_syscall_64+0x1b9/0x820 [ 346.018604] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.018621] ? graph_lock+0x170/0x170 [ 346.018642] ? find_held_lock+0x36/0x1c0 [ 346.018660] ? graph_lock+0x170/0x170 [ 346.018678] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.018696] ? check_preemption_disabled+0x48/0x200 [ 346.018711] ? check_preemption_disabled+0x48/0x200 [ 346.018732] ? lock_acquire+0x1ed/0x520 [ 346.031763] ? p9_fid_create+0x1bc/0x2b0 [ 346.031785] idr_alloc_u32+0x201/0x3f0 [ 346.031804] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 346.093000] ? trace_hardirqs_on+0x310/0x310 [ 346.097421] ? kasan_check_write+0x14/0x20 [ 346.101651] ? do_raw_spin_lock+0xc1/0x200 [ 346.105882] p9_fid_create+0x1d7/0x2b0 [ 346.109782] p9_client_walk+0x124/0xb30 [ 346.113753] ? __update_load_avg_se+0x311/0xb90 [ 346.118421] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 346.124037] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 346.129047] ? d_alloc+0x28b/0x380 [ 346.132578] ? lock_downgrade+0x86c/0x900 [ 346.136727] ? v9fs_fid_add+0x240/0x240 [ 346.140692] ? kasan_check_read+0x11/0x20 [ 346.144829] ? do_raw_spin_unlock+0xa7/0x2f0 [ 346.149230] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 346.153828] v9fs_vfs_lookup+0x1f7/0x4a0 [ 346.157892] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 346.162122] ? d_alloc+0x290/0x380 [ 346.165656] ? v9fs_vfs_create+0x130/0x130 [ 346.169891] ? lock_rename+0x236/0x290 [ 346.173775] __lookup_hash+0x12e/0x190 [ 346.177667] do_renameat2+0x6c1/0x1180 [ 346.181559] ? user_path_create+0x40/0x40 [ 346.185705] ? __lock_is_held+0xb5/0x140 [ 346.189759] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.195298] ? check_preemption_disabled+0x48/0x200 [ 346.200325] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 346.205876] ? do_syscall_64+0x9a/0x820 [ 346.209854] ? do_syscall_64+0x9a/0x820 [ 346.213837] ? trace_hardirqs_on+0xbd/0x310 [ 346.218190] ? __ia32_sys_read+0xb0/0xb0 [ 346.222271] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.227644] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 346.233093] __x64_sys_rename+0x5e/0x80 [ 346.237072] do_syscall_64+0x1b9/0x820 [ 346.240962] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 346.246343] ? syscall_return_slowpath+0x5e0/0x5e0 [ 346.251274] ? trace_hardirqs_on_caller+0x310/0x310 [ 346.256293] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 346.261319] ? recalc_sigpending_tsk+0x180/0x180 [ 346.266069] ? kasan_check_write+0x14/0x20 [ 346.270299] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 346.275136] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.280320] RIP: 0033:0x457579 [ 346.283501] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 346.302414] RSP: 002b:00007fb73dde1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 346.310119] RAX: ffffffffffffffda RBX: 00007fb73dde1c90 RCX: 0000000000457579 [ 346.317381] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 346.324643] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 346.331909] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73dde26d4 [ 346.339192] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:21 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000400), 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000340)={0x7, 0x400, 0x4, 0xc4, &(0x7f0000000080)=""/196, 0x6f, &(0x7f0000000180)=""/111, 0x87, &(0x7f0000000280)=""/135}) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) fsetxattr$security_capability(r2, &(0x7f0000000380)='security.capability\x00', &(0x7f00000003c0)=@v2={0x2000000, [{0xffffffffffffb05a, 0x9}, {0x9, 0x2}]}, 0x14, 0x0) 22:26:21 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x40003ffffe) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) fallocate(r1, 0x1, 0x3, 0x1a9) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r3, r2, 0x0, 0x3}, 0x10) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x1) 22:26:21 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:21 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ftruncate(r0, 0x7) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:21 executing program 4 (fault-call:14 fault-nth:7): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:21 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f"], 0x25) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000140)=0x7fffffff, 0x400) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") connect$inet(r0, &(0x7f00000000c0), 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x18020000, &(0x7f0000004b40), 0x97, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240), &(0x7f00000002c0)=0x8) r2 = socket$inet6(0xa, 0x80003, 0x800000000000002) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r5 = getpgid(0x0) capget(&(0x7f0000000080)={0x399f1336, r5}, &(0x7f00000000c0)={0x2, 0x7, 0x49d67149, 0x1, 0x10000, 0x2}) ioctl(r1, 0x2, &(0x7f0000000300)="42359d977f181c4261df7a38469325466ffe55e74013dd9f7453a8cb29c18c46444b80ba6934ed371d74e8381ed2056742bff9b6a622af71ef3624acebfb0ef3394d9eb013ca7fce5deaace60a2074bada0e48a81d016aac1d7305ab367eff4b68c67006fd1b3796dc2024d400362769a6126d7b96022584654876c45ae77e16e302bf9660c710527f73b0f4ba62c7a6470732a4db6f11dba0d26a0e7bc2c476ae4e386430f00258e3994ff97ecea4f522fe1a35b0874e8fa121f05a47fd") setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000001c0)={{0xffffffffffffffff, 0x3, 0x81, 0x1, 0x1}, 0xd8, 0x73898b22}) close(r4) [ 346.539823] FAULT_INJECTION: forcing a failure. [ 346.539823] name failslab, interval 1, probability 0, space 0, times 0 [ 346.551068] CPU: 1 PID: 13872 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 346.551081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.551087] Call Trace: [ 346.551117] dump_stack+0x1c4/0x2b4 [ 346.551142] ? dump_stack_print_info.cold.2+0x52/0x52 [ 346.567986] should_fail.cold.4+0xa/0x17 [ 346.568011] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 346.568032] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 346.568058] ? trace_hardirqs_on+0x310/0x310 [ 346.568077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.568095] ? check_preemption_disabled+0x48/0x200 [ 346.568110] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 346.568130] ? debug_smp_processor_id+0x1c/0x20 [ 346.574353] ? perf_trace_lock_acquire+0x15b/0x800 [ 346.574376] ? perf_trace_lock+0x7a0/0x7a0 [ 346.574400] ? graph_lock+0x170/0x170 [ 346.574441] __should_failslab+0x124/0x180 [ 346.592802] FS-Cache: Duplicate cookie detected [ 346.594332] should_failslab+0x9/0x14 [ 346.594352] kmem_cache_alloc+0x47/0x730 [ 346.594368] ? print_usage_bug+0xc0/0xc0 [ 346.594388] ? lock_downgrade+0x900/0x900 [ 346.598874] FS-Cache: O-cookie c=00000000b9586c8f [p=00000000845ed810 fl=222 nc=1 na=1] [ 346.604360] ? check_preemption_disabled+0x48/0x200 [ 346.609417] FS-Cache: O-cookie d=00000000b0f58035 n=00000000e6e888c5 [ 346.614899] radix_tree_node_alloc.constprop.18+0x1f7/0x370 [ 346.619638] FS-Cache: O-key=[10] ' [ 346.624508] radix_tree_extend+0x294/0x660 [ 346.628969] 34 [ 346.632715] ? radix_tree_node_alloc.constprop.18+0x370/0x370 [ 346.636968] 32 [ 346.641599] ? __kernel_text_address+0xd/0x40 [ 346.641616] ? unwind_get_return_address+0x61/0xa0 [ 346.641649] idr_get_free+0x83d/0xec0 [ 346.645435] 39 [ 346.649502] ? save_stack+0xa9/0xd0 [ 346.649526] ? ida_pre_get+0x130/0x130 [ 346.649550] ? debug_smp_processor_id+0x1c/0x20 [ 346.649570] ? perf_trace_lock_acquire+0x15b/0x800 [ 346.653616] 34 [ 346.657769] ? perf_trace_lock_acquire+0x15b/0x800 [ 346.665957] 39 [ 346.670916] ? perf_trace_lock_acquire+0x15b/0x800 [ 346.670938] ? perf_trace_lock+0x7a0/0x7a0 [ 346.670956] ? graph_lock+0x170/0x170 [ 346.677432] 3731 [ 346.683201] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.683220] ? check_preemption_disabled+0x48/0x200 [ 346.683234] ? check_preemption_disabled+0x48/0x200 [ 346.683265] idr_alloc_u32+0x201/0x3f0 [ 346.687296] 3830 [ 346.691555] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 346.691575] ? p9_idpool_get+0x23/0x90 [ 346.691600] idr_alloc+0x111/0x1b0 [ 346.691618] ? idr_alloc_u32+0x3f0/0x3f0 [ 346.693402] 35' [ 346.699329] ? do_raw_spin_lock+0xc1/0x200 [ 346.699357] p9_idpool_get+0x3d/0x90 [ 346.699380] p9_client_prepare_req.part.8+0xec/0xc30 [ 346.701201] FS-Cache: N-cookie c=00000000966dabb4 [p=00000000845ed810 fl=2 nc=0 na=1] [ 346.705691] ? delete_node+0x30e/0xd20 [ 346.710678] FS-Cache: N-cookie d=00000000b0f58035 n=000000005f6d4b0b [ 346.714425] ? unwind_get_return_address+0x61/0xa0 [ 346.714456] ? p9_free_req.isra.7+0x140/0x140 [ 346.716691] FS-Cache: N-key=[10] '34 [ 346.720330] ? idr_destroy+0x1c0/0x1c0 [ 346.720353] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.720366] ? replace_slot+0x151/0x520 [ 346.720392] p9_client_rpc+0x1c2/0x1480 [ 346.720410] ? radix_tree_descend+0x2e0/0x2e0 [ 346.724292] 32 [ 346.728976] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 346.728991] ? find_held_lock+0x36/0x1c0 [ 346.729017] ? find_held_lock+0x36/0x1c0 [ 346.729047] ? mark_held_locks+0xc7/0x130 [ 346.733968] 3934 [ 346.735789] ? _raw_spin_unlock_irq+0x27/0x80 [ 346.740769] 39 [ 346.742511] ? _raw_spin_unlock_irq+0x27/0x80 [ 346.747411] 3731 [ 346.751661] ? lockdep_hardirqs_on+0x421/0x5c0 [ 346.751678] ? trace_hardirqs_on+0xbd/0x310 [ 346.751689] ? kasan_check_read+0x11/0x20 [ 346.751705] ? p9_fid_create+0x1e2/0x2b0 [ 346.751722] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 346.751738] ? kasan_check_write+0x14/0x20 [ 346.755531] 38 [ 346.757531] ? do_raw_spin_lock+0xc1/0x200 [ 346.763118] 30 [ 346.768101] p9_client_walk+0x208/0xb30 [ 346.768123] ? __update_load_avg_se+0x311/0xb90 [ 346.768144] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 346.773169] 35 [ 346.777090] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 346.779101] ' [ 346.783893] ? d_alloc+0x28b/0x380 [ 346.791309] ? lock_downgrade+0x86c/0x900 [ 346.791333] ? v9fs_fid_add+0x240/0x240 [ 346.791352] ? kasan_check_read+0x11/0x20 [ 346.791372] ? do_raw_spin_unlock+0xa7/0x2f0 [ 346.797314] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 346.797347] v9fs_vfs_lookup+0x1f7/0x4a0 [ 346.797363] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 346.797381] ? d_alloc+0x290/0x380 [ 346.805338] ? v9fs_vfs_create+0x130/0x130 [ 346.805353] ? lock_rename+0x236/0x290 [ 346.805379] __lookup_hash+0x12e/0x190 [ 346.805399] do_renameat2+0x6c1/0x1180 [ 346.838913] ? user_path_create+0x40/0x40 [ 346.838933] ? __lock_is_held+0xb5/0x140 [ 346.838959] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.838977] ? check_preemption_disabled+0x48/0x200 [ 346.839007] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 346.846654] ? do_syscall_64+0x9a/0x820 [ 346.925754] ? do_syscall_64+0x9a/0x820 22:26:21 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a80)={'syz0\x00', {0x3f, 0x18000000, 0xb2, 0x8}, 0x2b, [0x0, 0x0, 0x6, 0x3ff, 0x6, 0x2, 0x7f, 0x8, 0x8001, 0x800, 0x81, 0xfffffffffffffff9, 0x7, 0x100000000, 0x6e, 0x30d3, 0xffffffffffffffd9, 0x2, 0x0, 0xb966, 0x5, 0x1f, 0x3, 0x5, 0x8001, 0x200, 0x1, 0x20, 0x7, 0x5, 0x2, 0x2, 0x3, 0x9, 0x7f, 0x9, 0x9, 0x8, 0x80, 0x2, 0x8, 0x7ee4, 0xff, 0x2, 0x4, 0x3, 0x8000, 0x9, 0xffffffff7fffffff, 0x1, 0x15, 0x5d6c, 0x6, 0x1, 0x9, 0x1, 0x7, 0x1, 0x1000, 0x8000, 0x0, 0x1, 0x1, 0x89], [0x1ff, 0x4, 0x9, 0xe3, 0x1, 0x3ff, 0x2, 0x81, 0x6, 0xffffffffffffff50, 0x100000001, 0xfffffffffffffb42, 0x50, 0x8, 0x7, 0xe7d1, 0x8c, 0x7f, 0x7, 0x3, 0x6, 0xffffffff, 0x100000001, 0x3, 0x1, 0x0, 0x36, 0x7fff, 0x9, 0xd67, 0x0, 0x2, 0x646, 0x10001, 0x86, 0x5, 0xfff, 0x3, 0x1, 0x10001, 0x8, 0x1ff, 0x3ff, 0x1, 0x5, 0x8000, 0xfff, 0x7, 0x136, 0x7fffffff, 0xd4a, 0x8001, 0x2, 0x9c6, 0xbf, 0x100, 0x5, 0x8, 0x5, 0x2, 0x9, 0x1, 0xfffffffffffff800, 0x2], [0x200, 0x9, 0x7, 0x7, 0x1, 0xd1ee, 0x6, 0x5, 0x1, 0xc8a, 0x1ff, 0x4, 0xe2b, 0x1000, 0x5, 0x2, 0x8, 0xfffffffffffffff9, 0xffffffffffffffff, 0x7, 0x3ff, 0x2, 0x1, 0x5, 0x1, 0x5, 0x64eb, 0x2, 0x8, 0x5d09, 0xf9c, 0x0, 0x9, 0x100000000, 0x3f, 0x7, 0xca, 0x7, 0x4, 0x7ff, 0xe9, 0x1f, 0x10001, 0x0, 0x80000001, 0xf6, 0x4, 0x4, 0x81, 0xc15, 0x0, 0x3, 0xfffffffffffff7ec, 0x1, 0x4, 0x8, 0x81, 0x5, 0x1, 0x40, 0x10000, 0x2, 0xfffffffffffffff9, 0x5], [0xfffffffffffffff9, 0x7f, 0xff, 0xffffffff, 0xffff, 0x0, 0xa4c, 0x2, 0x6, 0xed46, 0x4, 0xd7, 0x1, 0x2, 0x80000000, 0x8, 0x4bf6, 0x4, 0x7, 0x0, 0x6, 0x4, 0x2, 0x6, 0x21, 0x1, 0x1, 0x1ff, 0x0, 0x401, 0x7ee, 0x7, 0x4, 0xfffffffffffffffb, 0xcc1, 0x42e, 0x7, 0x4, 0x1, 0xcfc2, 0xffff, 0xa7, 0x9, 0xff, 0xbb, 0x9, 0x1, 0xfff, 0x7fffffff, 0x2, 0xffffffffffff5e90, 0x981a, 0x81, 0x93, 0xffffffff, 0x9f0b, 0x9, 0x5, 0x7, 0x6e, 0x8000, 0x9, 0x7, 0x3624]}, 0x45c) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 22:26:21 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_mreq(r1, 0x0, 0x0, &(0x7f0000000140)={@loopback, @multicast2}, 0x8) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x200) write$uinput_user_dev(r2, &(0x7f00000002c0)={'syz1\x00', {0x4, 0x8, 0xfffffffffffffffe, 0xfffffffffffffff7}, 0xc, [0x6, 0x8000, 0x851, 0x10000, 0x7, 0x4, 0x86d, 0x2, 0x100, 0x3, 0x7fff, 0x7, 0x9, 0x100000000, 0x1, 0x7, 0x81, 0x68c4, 0x10000, 0x5, 0x100, 0x5, 0x1000, 0x100000001, 0x7fff, 0x4, 0x2, 0x7fffffff, 0x9, 0x2, 0x1, 0x5, 0x1f, 0xd0, 0x400, 0x101, 0x2, 0x1, 0x6, 0x8000, 0x101, 0x8, 0x0, 0x7, 0x678, 0x100, 0x100, 0x10001, 0x4, 0x10000, 0x5, 0x3, 0x0, 0x1, 0x7, 0x40, 0x40, 0x101, 0x100000001, 0x7, 0x9, 0x9, 0x5, 0x1], [0x0, 0x9, 0xffffffffffffffe0, 0xf8d, 0x2, 0x6, 0x8, 0xfffffffffffffffb, 0x8, 0x8, 0x9, 0x2, 0x3, 0x3, 0x3, 0x56, 0x2624, 0x5, 0xffffffffffff8000, 0xc14, 0x9, 0x5, 0xff, 0xb989, 0x2, 0x1, 0x7fffffff, 0x9, 0x0, 0x2, 0xb0a, 0x7ff, 0x200, 0x7ff, 0x7fffffff, 0x42, 0xa4, 0xe, 0x6, 0x9, 0x8000, 0x200, 0x6, 0x9, 0x101, 0x800, 0x1ff, 0xa0000000000000, 0xabd, 0x4, 0x5e21, 0x0, 0x0, 0x1000, 0xffffffffffffffe0, 0x7, 0x80000000, 0x5, 0x6, 0x4, 0x3, 0x8000, 0x2, 0x8], [0x100000000, 0x0, 0x33e, 0x7, 0x7fffffff, 0xb63, 0x231f61ec, 0x9, 0x72c3, 0x3, 0x401, 0x7ff, 0x1000, 0x0, 0x58ef, 0x4, 0x1, 0xff, 0x200, 0x939, 0x80000001, 0x3, 0x8, 0x1, 0x7, 0x4, 0x8, 0x8, 0x7, 0x200, 0x6, 0x2, 0x20, 0x80000001, 0x7fffffff, 0x4, 0x5, 0x139c850c, 0x4, 0x3, 0x800, 0x2, 0x2, 0x80, 0x7ff, 0x5, 0x3, 0x1ff, 0x800, 0x83, 0x700000, 0x49, 0x2, 0x7, 0x5, 0x0, 0xa89, 0x1, 0x27, 0x6b1, 0x8, 0x0, 0x4, 0x80000000], [0x1ff000000000000, 0x2, 0x4, 0xc3, 0x10000000000, 0xb30, 0x10000, 0x4e7, 0x1, 0x6, 0x2, 0x7, 0x80000000, 0x0, 0x5e, 0xf3, 0x4, 0x100000000, 0x2, 0xac, 0x1f, 0x354, 0x19, 0x6, 0xa68a, 0xffffffffffffff04, 0x8, 0x6, 0x0, 0x7fffffff, 0x8001, 0xc4c2, 0x12f962de, 0x1, 0x8000, 0x2, 0x668, 0x3, 0x1, 0x1, 0x6, 0x81, 0xa8, 0x5, 0xfffffffffffff801, 0x0, 0x5, 0x100, 0x2, 0x7, 0xe568, 0xffffffffffffffc1, 0x80, 0x5, 0x3f, 0x1, 0x3, 0x6, 0x0, 0xf, 0x6, 0x9, 0x8, 0xae4]}, 0x45c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x6000, 0x0) r4 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000180)={0x1, 0xdee5, 0x5, 0x1, 0x81, 0xca, 0x1000, 0x6, 0x939d316, 0x7ff, 0x7ff, 0x3}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x80) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) close(r4) 22:26:22 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8100, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000000c0)={{0xffffffffffffffff, 0x1, 0x4, 0x1, 0x3}, 0x10000, 0x9, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0x4, 0xfffffffffffffffb, 0x7}) r2 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r3) 22:26:22 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = dup(r1) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x10001, 0x4, &(0x7f0000000080)=0x6}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x1c, "fcfde002a5c82b57d46a79e4b92fcca8dccc5beb64c0e88e6031100f"}, &(0x7f0000000140)=0x24) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r3, 0x800}, 0x8) close(r1) [ 346.925778] ? trace_hardirqs_on+0xbd/0x310 [ 346.925796] ? __ia32_sys_read+0xb0/0xb0 [ 346.925816] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.931853] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 346.931883] __x64_sys_rename+0x5e/0x80 [ 346.931913] do_syscall_64+0x1b9/0x820 [ 346.931929] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 346.931946] ? syscall_return_slowpath+0x5e0/0x5e0 [ 346.931967] ? trace_hardirqs_on_caller+0x310/0x310 [ 347.001210] ? prepare_exit_to_usermode+0x3b0/0x3b0 22:26:22 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1000, 0x10000}) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r2) [ 347.008968] ? recalc_sigpending_tsk+0x180/0x180 [ 347.008984] ? kasan_check_write+0x14/0x20 [ 347.009009] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 347.009034] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.045577] RIP: 0033:0x457579 [ 347.045595] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 347.045604] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 347.045621] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 347.045636] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 347.073707] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 347.073718] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 347.073727] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:22 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r3 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="4d80c45a1fa6dcb3a22de309bc684f7203f9a8141d1e8c7232119517e9d7daeed2fa122f6af52a6636465f98f9", 0x2d, 0xffffffffffffffff) keyctl$clear(0x7, r3) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:22 executing program 4 (fault-call:14 fault-nth:8): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:22 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:22 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f"], 0x25) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:22 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x5, &(0x7f0000001380)=[{&(0x7f0000000100)="fc6248973ba1f5b8ced49aa6e22a7dfc2b535771c50414c9", 0x18, 0xffffffffffffff80}, {&(0x7f0000000140)="ee84134c4fe92bef9168a08845c058c8bcd6acc6393e79194e12d1275ebc299c2b28ef2eb725f6750ec944e7b3c8336df0cc20f8641086ec93e2c4f34441ad6f4e7454ff00975a2a3b4eb3d23ca0c90474492d3cbf9a32bcf282047d7394118e77a27db16e4c4c4d192e1e25f12bf5271643be4e1d30be1773f7c6ebeb5cda8cfd4a00f7f492702b8529b1235846218f0fc42801f75e1c9ea024afa2cf448fedee0b043fd02cd7243c1c429e8600b43fc0b61cf5332ec0325d98", 0xba}, {&(0x7f00000002c0)="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", 0x1000, 0x80}, {&(0x7f0000000200)="16d7b6208725931399882a9d08411a91c83e39d5dfcce378d93aa67c0633d72c1d01d6689b80daec4ea21d0af513ba03e53ea209bd8f4c819b1019e4291853c5c5a65671eb9a4c1ab0aa4c2b93a2555c0d25928ebdbbd5878098e2b1ba1631c33f8a4e69a6e3f3bec1f40952aed8e8ba9ee665534fe9225e3a1ee251", 0x7c, 0xe44}, {&(0x7f00000012c0)="5a32cf4033fc6cd183051deda516d6451586744c89c26d19362c877cd6623f97d28699f375c64da11316068b74af7a3c6db1681307d35da0d11b06be72edf2c9d3b94fa06360b2ba7604c88af60f0ea39e9014a62a17337c8d45cecffd6a360b3694732f64dc49a85649078f2ac37774866efece31825a19a8d53e9224226921cb04c845ba35a056d3843ac64523226923280d8c80e9754374bc71ba30069fa169", 0xa1, 0x800}], 0x80000, &(0x7f0000001400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@noloccookie='noloccookie'}, {@lockproto_nolock='lockproto=lock_nolock'}, {@acl='acl'}], [{@subj_user={'subj_user'}}]}) close(r1) [ 347.328303] FAULT_INJECTION: forcing a failure. [ 347.328303] name failslab, interval 1, probability 0, space 0, times 0 22:26:22 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x9bec) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) write$apparmor_current(r0, &(0x7f0000000080)=@profile={'stack ', '/dev/snd/timer\x00'}, 0x15) close(r2) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x80c0, 0x0) [ 347.407365] CPU: 0 PID: 13901 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 347.414771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.424141] Call Trace: [ 347.426773] dump_stack+0x1c4/0x2b4 [ 347.430442] ? dump_stack_print_info.cold.2+0x52/0x52 [ 347.435694] ? p9pdu_writef+0xe0/0xe0 [ 347.439527] should_fail.cold.4+0xa/0x17 [ 347.439557] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 347.439575] ? lockdep_hardirqs_on+0x421/0x5c0 [ 347.439592] ? preempt_schedule+0x4d/0x60 [ 347.439616] ? pdu_read+0x90/0xd0 [ 347.439632] ? graph_lock+0x170/0x170 [ 347.439648] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 347.439661] ? p9pdu_readf+0xb6a/0x2130 [ 347.439682] ? p9pdu_writef+0xe0/0xe0 [ 347.448846] ? assoc_array_insert+0x2981/0x2fa0 [ 347.448869] ? __lock_is_held+0xb5/0x140 [ 347.448899] ? ___might_sleep+0x1ed/0x300 [ 347.448917] ? arch_local_save_flags+0x40/0x40 [ 347.448932] ? check_preemption_disabled+0x48/0x200 [ 347.448961] __should_failslab+0x124/0x180 [ 347.448979] should_failslab+0x9/0x14 [ 347.457707] __kmalloc+0x2d4/0x760 [ 347.457729] ? p9pdu_readf+0x1928/0x2130 [ 347.457749] p9pdu_readf+0x1928/0x2130 [ 347.470529] ? p9pdu_writef+0xe0/0xe0 [ 347.470567] ? find_held_lock+0x36/0x1c0 [ 347.470591] ? finish_wait+0x430/0x430 [ 347.470606] ? mark_held_locks+0xc7/0x130 [ 347.470625] ? _raw_spin_unlock_irq+0x27/0x80 [ 347.470639] ? _raw_spin_unlock_irq+0x27/0x80 [ 347.470658] ? lockdep_hardirqs_on+0x421/0x5c0 [ 347.478425] ? trace_hardirqs_on+0xbd/0x310 [ 347.478445] ? p9_fid_create+0x1e2/0x2b0 [ 347.478462] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 347.478480] ? kasan_check_write+0x14/0x20 [ 347.478497] ? do_raw_spin_lock+0xc1/0x200 [ 347.478526] p9_client_walk+0x3ba/0xb30 [ 347.478554] ? __update_load_avg_se+0x311/0xb90 [ 347.487291] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 347.487312] ? v9fs_fid_add+0x231/0x240 [ 347.487327] ? d_alloc+0x28b/0x380 [ 347.487347] ? lock_downgrade+0x86c/0x900 [ 347.597925] ? v9fs_fid_add+0x240/0x240 [ 347.601908] ? kasan_check_read+0x11/0x20 [ 347.606052] ? do_raw_spin_unlock+0xa7/0x2f0 [ 347.610454] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 347.615036] v9fs_vfs_lookup+0x1f7/0x4a0 [ 347.619089] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 347.623330] ? d_alloc+0x290/0x380 [ 347.626872] ? v9fs_vfs_create+0x130/0x130 [ 347.631123] ? lock_rename+0x236/0x290 [ 347.635022] __lookup_hash+0x12e/0x190 [ 347.638919] do_renameat2+0x6c1/0x1180 [ 347.642812] ? user_path_create+0x40/0x40 [ 347.646951] ? __lock_is_held+0xb5/0x140 [ 347.651010] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.656557] ? check_preemption_disabled+0x48/0x200 [ 347.661586] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 347.667114] ? do_syscall_64+0x9a/0x820 [ 347.671086] ? do_syscall_64+0x9a/0x820 [ 347.675070] ? trace_hardirqs_on+0xbd/0x310 [ 347.679384] ? __ia32_sys_read+0xb0/0xb0 [ 347.683438] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.688819] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 347.694264] __x64_sys_rename+0x5e/0x80 [ 347.698259] do_syscall_64+0x1b9/0x820 [ 347.702141] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 347.707509] ? syscall_return_slowpath+0x5e0/0x5e0 [ 347.712453] ? trace_hardirqs_on_caller+0x310/0x310 [ 347.717470] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 347.722506] ? recalc_sigpending_tsk+0x180/0x180 [ 347.727280] ? kasan_check_write+0x14/0x20 [ 347.731534] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 347.736391] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.741571] RIP: 0033:0x457579 22:26:22 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c"], 0x28) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:22 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6fee518675f544f1b3"]) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') pipe(&(0x7f0000000080)) 22:26:22 executing program 4 (fault-call:14 fault-nth:9): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 347.744752] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 347.763645] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 347.771352] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 347.778615] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 347.785887] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 347.793197] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 347.800460] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:22 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:23 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:23 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c"], 0x28) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:23 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) init_module(&(0x7f00000006c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x23, &(0x7f0000000700)='+proc:\x00') ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000740)='./file1\x00', 0x2) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000780)=[0xdf, 0x7f]) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f00000005c0)=""/83) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U-', 0x4}, 0x28, 0x3) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x0, 0x1000}}, 0x20) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r5 = accept4(r0, &(0x7f00000002c0)=@rc, &(0x7f0000000240)=0xfffffffffffffe75, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000440)={0x7f, 0x7, 0x0, 0x80000000, 0x5080000000000000}, 0x14) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_buf(r6, 0x0, 0x0, &(0x7f0000000400)="5d83073c104dff8c68d67e47406cc0ac5d006a5a277aed43d979793dfefd089a4ca57cc4e6593cdaffc21b1a00ffd359", 0x30) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="b704f0cff01fb6546800432e828fd8fec4f5650ad5a32b24b0edbf0836bcd4120139abc48813ead1c9cf98e8a90d8508e787e53ca91e4909f19b4f82bfff1b30fa95214dfdd9456f7466f141bb12be885ff124024015adbf67851a6c35ad65a78d051320bc88aab0b2f90b36f2d524df60cc6d51dc416176d74b593167c895a11165b1e19b16704009144e82175b14ab1c87dd69b955a527b637973f68f88c6eee6fd3ccfaaa7ac1fd2c359cfd201da97779a9f98f"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000000480)=""/130, &(0x7f0000000540)=0x82) mkdir(&(0x7f0000000280)='./file0//ile0\x00', 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)=ANY=[@ANYBLOB="b98f4fd9762d9400000007000000"], &(0x7f00000001c0)=0x1) rmdir(&(0x7f0000000040)='./file0//ile0\x00') clock_gettime(0x6, &(0x7f0000000640)) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000680)={0xa8dd, 0x1000, 0x5, 0x2, 0x1, 0xd9}) close(r3) [ 348.005303] FS-Cache: Duplicate cookie detected [ 348.010116] FS-Cache: O-cookie c=00000000da98b516 [p=00000000845ed810 fl=222 nc=0 na=1] [ 348.010134] FS-Cache: O-cookie d=00000000b0f58035 n=0000000007d88a3b [ 348.024859] FS-Cache: O-key=[10] '34323934393731393531' [ 348.030384] FS-Cache: N-cookie c=0000000095690200 [p=00000000845ed810 fl=2 nc=0 na=1] [ 348.038418] FS-Cache: N-cookie d=00000000b0f58035 n=000000007aafb8eb [ 348.038427] FS-Cache: N-key=[10] '34323934393731393531' 22:26:23 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c"], 0x28) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:23 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x8000fba65fc) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) [ 348.150108] FAULT_INJECTION: forcing a failure. [ 348.150108] name failslab, interval 1, probability 0, space 0, times 0 22:26:23 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 348.225931] CPU: 1 PID: 13955 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 348.233349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.242711] Call Trace: [ 348.242739] dump_stack+0x1c4/0x2b4 [ 348.242766] ? dump_stack_print_info.cold.2+0x52/0x52 [ 348.242792] ? rcu_bh_qs+0xc0/0xc0 [ 348.257803] ? unwind_dump+0x190/0x190 [ 348.261714] should_fail.cold.4+0xa/0x17 [ 348.261732] ? is_bpf_text_address+0xd3/0x170 [ 348.261754] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 348.275395] ? __kernel_text_address+0xd/0x40 [ 348.275414] ? unwind_get_return_address+0x61/0xa0 [ 348.275433] ? graph_lock+0x170/0x170 [ 348.275451] ? graph_lock+0x170/0x170 [ 348.292462] ? find_held_lock+0x36/0x1c0 [ 348.296541] ? __lock_is_held+0xb5/0x140 [ 348.300628] ? ___might_sleep+0x1ed/0x300 [ 348.304795] ? arch_local_save_flags+0x40/0x40 [ 348.309422] ? mark_held_locks+0xc7/0x130 [ 348.313589] __should_failslab+0x124/0x180 [ 348.317939] should_failslab+0x9/0x14 [ 348.321759] kmem_cache_alloc_trace+0x2d7/0x750 [ 348.326469] ? p9_client_walk+0x57e/0xb30 [ 348.330637] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 348.336116] p9_client_stat+0xc1/0x720 [ 348.340027] ? p9_client_walk+0x57e/0xb30 [ 348.344211] ? p9_client_mknod_dotl+0x650/0x650 [ 348.348918] ? p9_client_walk+0x24c/0xb30 [ 348.353079] ? __update_load_avg_se+0x311/0xb90 [ 348.357769] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 348.363409] ? v9fs_fid_add+0x231/0x240 [ 348.367400] ? d_alloc+0x28b/0x380 [ 348.370953] ? lock_downgrade+0x86c/0x900 [ 348.375126] v9fs_inode_from_fid+0x7a/0x350 [ 348.379477] ? do_raw_spin_unlock+0xa7/0x2f0 [ 348.383904] ? v9fs_vfs_getattr+0x270/0x270 [ 348.388254] v9fs_vfs_lookup+0x3f5/0x4a0 [ 348.392325] ? d_alloc+0x290/0x380 [ 348.395886] ? v9fs_vfs_create+0x130/0x130 [ 348.400128] ? lock_rename+0x236/0x290 [ 348.404066] __lookup_hash+0x12e/0x190 [ 348.407976] do_renameat2+0x6c1/0x1180 [ 348.411874] ? user_path_create+0x40/0x40 [ 348.416060] ? __lock_is_held+0xb5/0x140 [ 348.420140] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.425709] ? check_preemption_disabled+0x48/0x200 [ 348.430781] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 348.436349] ? do_syscall_64+0x9a/0x820 [ 348.440519] ? do_syscall_64+0x9a/0x820 [ 348.444517] ? trace_hardirqs_on+0xbd/0x310 [ 348.448885] ? __ia32_sys_read+0xb0/0xb0 [ 348.452973] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.458362] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 348.463872] __x64_sys_rename+0x5e/0x80 [ 348.467871] do_syscall_64+0x1b9/0x820 [ 348.471771] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 348.477171] ? syscall_return_slowpath+0x5e0/0x5e0 [ 348.482123] ? trace_hardirqs_on_caller+0x310/0x310 [ 348.487195] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 348.492224] ? recalc_sigpending_tsk+0x180/0x180 [ 348.496998] ? kasan_check_write+0x14/0x20 [ 348.501257] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 348.506127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.511337] RIP: 0033:0x457579 22:26:23 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:23 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000001040)=""/4096, &(0x7f0000000080)=0x1000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x4, 0x40000000, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x100, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000140)=0x6) close(r2) [ 348.514536] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.533451] RSP: 002b:00007fb73dde1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 348.541192] RAX: ffffffffffffffda RBX: 00007fb73dde1c90 RCX: 0000000000457579 [ 348.548481] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 348.555765] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 348.563052] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73dde26d4 [ 348.570350] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:23 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20000240200, 0x0) getdents64(r2, &(0x7f00000000c0)=""/93, 0x5d) close(r1) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) 22:26:23 executing program 4 (fault-call:14 fault-nth:10): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:23 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c65"], 0x29) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:23 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a80)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8) fstat(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x2, {0x320, {0x2, 0x3, 0x7}, 0x1, r2, r3, 0x20, 0x6, 0x200, 0x4, 0x4, 0x8001, 0x9, 0x3, 0x7, 0x8, 0x4, 0xfffffffffffffff9, 0x0, 0x0, 0x400}}, 0xa0) 22:26:23 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x4f, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000100)="217dade96a420063ea8a8989373d3693f4293a31d1a52ea72c3ede5a3497a23c9555e79f2a9e9e2227f3d490addfe5c5d596c88740f1f286a09b47940a06ea9996943a645dacc3236a41d213a1", 0x4d, 0x3}, {&(0x7f0000001040)="6fcc27ead33718033e971f94b0e65d9bee45848eeb3af5b6a78d9fc5dd6626f838922f3048680f32441ed910a307175357eb2a4c73936fa337bd664a2edd7d3a7d2ab8eb28524a99a023be3095635cb193958a95c67cba3a173f598f20c906609c3062001d4d637e251f1c0993c22e46931c6f199508548625919e787a9f36bbfa533593625c77dc7c20da84a0164d9d6f94908d5f9f32e1a2c2c3205074e1c806762609536bc03df9c0de67447848ced2d38b0ef9bffb5c89d394e1aa59c4be2216f39f6ee964d8b9d29360cef80b9039a1204f4d4891d9726bef744963053e7b5b3721ae415eed960535174e32643bbd588a4bac02ef33250a240ee29dd2aa6d504198f01dd63c058a382997f58ab4482f330db9309759ef08d3364106f5fda5cbbe5985442d66bd69089582f36827d76a64694d183ef7bbf85df06ecb399b9054c17a489a75cd22b10d9113afa30e8fb2e67994da00b373ab54a4e5c6f77ef367c6520de5842f9b668fcdc921646ef1db33d04ee654d5ad9b617c77344652f3fb2b712d5323ffd163b8d84494cac84d1d8479dc740f35bae1c443e001995a00ef125c1a4f21a6719aad77168b2d36db4eb6dc526fb0000abb7a2c08149564546ea72851a8a9e0409a54b22aefb72477de1ba51078a151128ef63dffc953d358640d4c29091e97003b616d2e1743fe6d07216190156b6ed3186ef32d94f57ceb544fc492721412569f58458b90873dec6db42b2379a70e7a3c1d2c53d1265b5976d7604b988bccf19145698b29a51f9c44ede54c59d4db45a32fdd2c4b7aa819c9f1040594ac49fea692f384a82f964854782bbb1aae17bd3d5f4b661f1413dbb69cb9b0addd3f4a923f058b4361e6c478f5b28d039c2bbd3b2b6d33ef199c01200b7c395d1999f487ac04838f889d3d1d489e049df65abd37aee6b5c2ce47f30609adcb260daf59791159a73cb22cef8b85d8d8d58a38e6ca29cd411decca673d4ed32ab6eed51f27c40eee365b2881c3873d31a62fcf72de12cf5261aab177ac727e0287551e71ec1297544c66c267e8f26ceb5beac05ac45cb2e10fe04a75941074cd5152652eb280b26b7663c74f776248848dcf9ee6ea80029e504faa54df0d2315875260e00d9deb255e615ffd79c525a9dd71fd37e0068fcd9168217ad4659b27ab476ae17bba7d1091863801a4159d07f5c8d25422b4759157539de789ec69499257b4a1f567f640f1d45d430fc355ea4806cd481ec8810b804107b182d17af6bb6a5a95c5d1ad609c16f007658a59957854d59251771bd0bc2a18f2fe9890397a6a180ccac9c29658d15df9d97f9d87ccd9805aad1ef7209fbba693b6de93be5c04259e7697f2eea68bdda69b0e9cba7f8b9b7180a33c4234894e23ac34b59054a500322ab756631c29f8cefc264ef211bd10ff3530f398eda667b279440cbc0c025c5a073c723d0f46bc982b7162e47d515d20a9de88c701dbb736f7a0b3f12d6e0f383b9dabf15575c68870851e9cb7d864eed74b9cb47831b9c40ac6ef2ec7747238994d34a61090d5289c36f6b193191b834f6fe812050d728d5069a7101c071e71ac67400519953f0b9cb40fe2f0a0d1f0bf21bbc7674d2dd31a6f0fed7514f75f8d8853aab0a0dd4b9f681ed4cb97affdc5a3fdf9db4530baf86a8fed42c1527c2445fcc4ff53736d6a2a53aae89227556b152fe1ab6cac149593304b640c24139ab2a93a82857f1e88686b975a88c261c9e3cbe208438dfeb21848fad31980221e8526cccbd1c66c6c4b395286af6337e1116c1931631dfed8a9f17500c11689108fd82f4a1a96f238511de14645e92684d47e8f29daaefae7ff9c18d2537085e5b7ccbf22295c7bbd35d15920fce0ee4a0aef0c9b06ec72fbee88a5f2d54a51016e9fe91b3b99a2b777b14b1888ce37944b2f44875b056a3811034704f848cd0301db5e75cd5deaef99ed35dfbaee09f2ae069154c3e91f19bfca97355181de8eaa471929c74aa7994018ec5f734cd8651d55e512d11ab1b13b8fca1b36782bb842b48f801446d4d0967185b61416753099d754179d3bfc59d374e6019c331dbc625521b608afbbd8eb7e7851325442db1cbe2a7b893701f0035f2601b41d8732774467f9f94af2880badc04fa8abd29a3955e3f6e4c3c505fc85b4bd9ebc2d01a3a7c5ea8f5cf77e7530be4e801cc4a707af77ebf1ad4cd1cb107ae66ce35fbe76c3241b07804a0984b91ba46dc4f12822fa0148714d09b073c526ff212f0ba5a16d0b3694d5e89849e09a6302d57f82f4068d9082ed12e7c333bd4e74e3d67306893f8b44f431db9bf581986119f1ab8bc8dc392d03558aa38a1ba3eff229a79e9f5c061a4c59a5375c82709a4058292b5fbf4be38b556e886ee061d2abe5269ac46675e8f9b6e7a8ec22e436b9c79aa155b99cf3a1963d77a68e8dd486c2dc719ff0e957a9d8b169b66486d28df23f772abd6ee4dcca2be7d9f38d4991e2cb2fc76eca59d5d76a0fd72bbdb1b2e32b307120ac29b3435d18f9ef82a224d01896fd55376a512eef58a66d46e4f428423185523197a3f28baec195ca7294b677514231fd6a0f36b53c626b02a8cdad428958cc67a8053262517e8c342590e2764feec5d30fdeb955e9c54cd66259111c12ba9e6f5392ad928abee05b798ce60e5a2451a82675266404a57a03379b67aaf196b3193a3edb3177b4c8d509e7ffa9784beb0596a8c18a5bfdab1784dd3d3397aa3b63f38d47472ddd4e57baeb42c6c9147afae58542cd1fd386682f09403155de4bc17b5232c7ebeff01b2c03bcc976ffcb87fadd912f2bad86487bde7871e202f3b3d276c2977c00ebb607b11c9d86915484b98b750a44d43967d921f7ff2015d940e40b8712f9d9f36136dc6a26dfbff134f3fe84dace9daf049817556aefea15f37366aa01633fa80a7902b18b98523b5be0527bdd092612c81fb570d3357bbebb356c00391563641f2030002487f151c5b29a8e3e1012cd35e0f72a1bcc33e5a997d4e3b5da9d82eb92905ab4c4d7a52ecb4a1023c2490d61773d33edbed21042557346f1747e8ce7e6965ade6e16b1ba9984475fea93593699fa0f22a379935c539f58345081fdcc479083dea0a2e1d038db269028c840502d3a6e37cd57a4fde8f76d0601dd21fb4b057d47ba946990b5ad2ecdbd6d8852351eaf48915239f98a506735ba4651753ba48517113e090eff2c1cfaf3fe7085f75fda47fc45dd370f0ff9fd7824350b12bf4791c3868ac23a9bf32ffe1cbd291afd770b7b995ce4d6893cfc805c2a848a5bf4c709dfd36c9c4b1814b8c8c57b986c4129b555c11f37aa7e62b7fdb45c590181a09aa44517900cd60f10402115d2035c3196a79d7b79f5f7a637ff95705ab010c019226a4ffac5c43c5c48e367dfbbd38b3a16093cd1bdd6bfe4581380f52eb48430f0cf7a528b298354e08034b593d9e4373a7d59c0cce799de77c87ec67b715e10684ca33b0cf442f99d57602558ac95993f123462e66eb04f0923badc1349c95c1fffcb720e5c71ac7be05897b2b06edd6eada4ce91dea6828542913934c727947d57d0a14bdac332655ed55379d71dc14ca1fc9b46744ad742562b713926a35b7640c2bd52dc19d1ff8d641553f09d6f0f4806156c63de1eef38e92dd7c6ed0b472057c167b967a907a5a56203ccd6c9fc93a6e35ee39415a47fcd2cb409c7bb09da7babacb4c237f0648d7e5101a1b574e42a22171ed0e803a157f23c293cf187dc9079fdcfc643e6032e87b01affab2e15ddb6a5c7287b05535d6991466cde7572ea8f4c9bdfe6f72033356501e900eeab05e753c43ee6b8ffa165b5b860d589ff30f44e0af7acacada876f0973d91f512e4771ec2cfdf7b88eaf0800d716d3e6ddd7f730a30fa5c6a9bf71001079b6c61543fb900d1ef3863c7eff1911f848e29472816f1c839dbbbdc8c49566ba127daaa6ffa7f2b443032a565d65878bfa21cdad8c1d79c1218928365e070f3fa007329ba2a59def6f3fbd86a929aab32d99ffdb3443a204ca7426d08dd20583f4541aba7299c74adfa7de04ae81add15d30a92d3ff58d7938629762d06fb050d9941ea8aa5aa2de76cfb774cc5e2c4283f361ec615461deda52dbc556948a5d54d6cb21ab5f950236e6b8d897b7724df7e9bb128cfba7ff14080ebc9abbafcc29f95a9940daf52dd9a537a34b6059c8e46053b11be62d57f07cdd1a4c1e64e0873047925ecf441f6421c075986b1b160fc450da93c5a1f18c3e368a6c40b4788767a3f9b5532ef890ddc60c9ac9531f76be7b4e0683c54b1706d185ac8d6c85902e8e9130fb0cf3f02598157fda767d4eecb15b7643c79c89c9057fe126bf1b7d2d77fc1467227a635d36f96aea9cc12facce638169b065ad74c928b1b01781adf7d6e8e91eabca58f397ba2d004b4d69716e2f682eccfd90ccfd05a2105dc2ab7cfa6d947493019e9b19baf53aa577c4e5cfe3c67be7c2c74d110cb3d6352d470454b8b29f4650d268f5b931b5754edf6a52e19d41ca258c814ce915552412072257e100b63cf23700eaca0d27375059c1b415549d0e6424127d1cb3658ba1072702853308f4bd8205fbf0ecefdd7d6e4047d76f5b23828fa70a4b774855ce075dafbb37164d5246b204cf9ec30eabdfa60098c373518e6aa4112c6cb95951fa270cf07a5a7220db012d3cd1329ab515932dc371e065d7cedaad072ef3b395de6d2423479341cf4518781d70c83d83025af57f3cb776c8411d0ca8097b64538744e0b9f38e78b3ebd9e3b841c3a86074327a6857f592497616bc5c4f93ba5dcb04285dd76ad31ff0cb135a6b299c57f4692a867b1e45b49ab6c177b2047a557f07716299645b56f274d3ba365e9952b736ef890c549410d4f949838b374979a2ea14c57b648ca9cd5a95eb6ab3268142b05f87e69e2f6554de73bb29bd8800f4686a5e60076b7533eb97497adfb81fa4691373d9a4d7df005ddb4295773d32543961f336f46d6a79388f91f2e9864db7b2703ca6df15616a457eaf8b4e8f28a53a3f5173b8912b33a2575c9cb6723dc25de818d697a262ada82b695b462311e55d258c82c60fd9f98f4045623a09b36a2f47c7f8e984ce0d7b92d45e3530b4eab644bac26bb017a60719a7615c9adb020282f74db8d98fcacd5f9045ae49488ef2c3bb6354f9926f1e2c3c36c610f93a7c6f9ea1aef76ce9064b04811a3519756c654eedad88a911c1b03c525ec599f24d6b02dc59c9f8dbcbad956a4de0375a9e2fd8a7a82efd046cb36683c684a2fb01197ce448622d66ca50380bc885c20e4d1de3fc79afcdf07e9968f5df255ce6b45c30da57ca32c244f84b2faffcff140921d6032005ba3806170d080ac60c9ca71b0f350129e9fbb61194e7270b8d700fa380f2e3c15c62551f7bd6b2aee8fa594f93fe722cc54da0cf0ac228678964c4d32b21db552478a9a9185938c391623d3494e7b6588f8103cac78dc7f8111109ea7ede464bdb80024b21a76ce1106afb5f082e23ea2abbb7337660cabe95021ef30d41bfe9a490e7fa30c2d0636edbbcc6459bd93cb86d1c154b3fea6bef666eafa731f37e4c755113cbcccead47647aeba2066475c9b62e79b9a7b6a25ceee3076e91550db5c2bf73ef6912ae6469c50677de39f1a503c0b9030a4e244fb7136ee0e7c75852f88a24bb61a8207a3b28c39902423e3a84c1e65b7d6024a4546816e5a535becca795ff2ea9b8f2b43603922e2a9730daa371899244418478e6b17c9673c", 0x1000, 0x9}, {&(0x7f0000000180)="81da84e4dcf978a1f2259262ad60039395eb3935154b7af9b69e750b0d4fa49ea7a381bf28848bccff9aa658243ec3e9f866b27cac4207b894510c1c800a5cdb11415bfc39146914de3a7b6110eb1c6603695865a9a4cc2c0cf4f1ddd0313d03ce30870e2fa37c9a4e412975ccc514576f5f258bc0139590b9ba33647bd61878549add61eae269890c6c17bc8183571f10d8387fda925be0db67c2bd0cfd5eb164291b46f71da45277ad4d873224fc99db25b3d673d8069dcc7dc60b3200cefd91b475ebc1", 0xc5, 0x5}, {&(0x7f0000002040)="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", 0x1000, 0x9}], 0x200000, &(0x7f0000000340)={[{@grpjquota='grpjquota='}, {@auto_da_alloc='auto_da_alloc'}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@delalloc='delalloc'}, {@usrjquota='usrjquota='}, {@dax='dax'}, {@test_dummy_encryption='test_dummy_encryption'}, {@acl='acl'}], [{@subj_user={'subj_user', 0x3d, '/dev/snd/timer\x00'}}]}) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:23 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) r2 = getuid() syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000100)="151af808defcdf138b83a5d832efadea58876dad8aced049504ab354c8fb57e022f785c341589a4c3bb87ed15edf41ae339894ce5cebedd9592fcebd1989c529f9dae3dec0986a2410e3992e4a7c0eea853df685b1f1e5db993fd12b093d0f12397e89fe50811b42c4bf420fa040de8c5ed1669f3e3273e523f939e84a74a39f90b95e116c26deffa8adaedf03", 0x8d, 0x5}], 0x200000, &(0x7f00000002c0)={[{@errors_recover='errors=recover'}, {@errors_recover='errors=recover'}, {@uid={'uid', 0x3d, r2}}, {@show_sys_files_no='show_sys_files=no'}, {@umask={'umask', 0x3d, 0x7fff}}, {@errors_remount='errors=remount-ro'}, {@show_sys_files_no='show_sys_files=no'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x194a}}]}) [ 348.813582] FAULT_INJECTION: forcing a failure. [ 348.813582] name failslab, interval 1, probability 0, space 0, times 0 [ 348.836811] CPU: 1 PID: 13991 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 348.844219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.853674] Call Trace: [ 348.853708] dump_stack+0x1c4/0x2b4 [ 348.853729] ? dump_stack_print_info.cold.2+0x52/0x52 [ 348.853748] ? __kernel_text_address+0xd/0x40 [ 348.853767] ? unwind_get_return_address+0x61/0xa0 [ 348.853791] should_fail.cold.4+0xa/0x17 [ 348.853815] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 348.853845] ? pdu_read+0x90/0xd0 [ 348.874643] ? graph_lock+0x170/0x170 [ 348.891064] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 348.896630] ? p9pdu_readf+0xb6a/0x2130 [ 348.900626] ? do_syscall_64+0x1b9/0x820 [ 348.904707] ? __switch_to_asm+0x40/0x70 [ 348.908798] ? p9pdu_writef+0xe0/0xe0 [ 348.912611] ? __switch_to_asm+0x40/0x70 [ 348.912627] ? native_usergs_sysret64+0x5/0x10 [ 348.912650] ? __lock_is_held+0xb5/0x140 [ 348.912662] ? graph_lock+0x170/0x170 [ 348.912688] ? ___might_sleep+0x1ed/0x300 [ 348.921860] ? arch_local_save_flags+0x40/0x40 [ 348.921878] ? __lock_is_held+0xb5/0x140 [ 348.921902] __should_failslab+0x124/0x180 [ 348.921919] should_failslab+0x9/0x14 [ 348.921933] __kmalloc+0x2d4/0x760 [ 348.921947] ? memcpy+0x45/0x50 [ 348.921962] ? p9pdu_readf+0x529/0x2130 [ 348.921987] p9pdu_readf+0x529/0x2130 [ 348.929863] ? p9pdu_writef+0xe0/0xe0 [ 348.929886] ? graph_lock+0x170/0x170 [ 348.929901] ? _raw_read_unlock+0x35/0x50 [ 348.929924] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.938648] ? check_preemption_disabled+0x48/0x200 [ 348.938666] ? check_preemption_disabled+0x48/0x200 [ 348.938694] ? __lock_is_held+0xb5/0x140 [ 348.938708] ? graph_lock+0x170/0x170 [ 348.938729] ? check_preemption_disabled+0x48/0x200 [ 348.938749] ? check_preemption_disabled+0x48/0x200 [ 348.950858] ? __lock_is_held+0xb5/0x140 [ 348.950882] p9pdu_readf+0xd2c/0x2130 [ 348.950916] ? p9pdu_writef+0xe0/0xe0 [ 348.950931] ? find_held_lock+0x36/0x1c0 [ 348.950949] ? graph_lock+0x170/0x170 [ 348.971822] ntfs: (device loop1): parse_options(): Unrecognized mount option fscontext. [ 348.973098] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.973120] ? check_preemption_disabled+0x48/0x200 [ 348.973141] ? check_preemption_disabled+0x48/0x200 [ 348.987653] ntfs: (device loop1): parse_options(): Unrecognized mount option fsmagic. [ 348.987837] ? finish_wait+0x430/0x430 [ 348.999879] ntfs: (device loop1): parse_options(): Unrecognized mount option . [ 349.000702] ? __lock_is_held+0xb5/0x140 [ 349.038436] ? kmem_cache_alloc_trace+0x353/0x750 [ 349.038453] ? p9_client_walk+0x57e/0xb30 [ 349.038471] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 349.038493] p9_client_stat+0x264/0x720 [ 349.049086] ? p9_client_walk+0x57e/0xb30 [ 349.049111] ? p9_client_mknod_dotl+0x650/0x650 [ 349.049126] ? p9_client_walk+0x24c/0xb30 [ 349.049144] ? __update_load_avg_se+0x311/0xb90 [ 349.049176] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 349.049193] ? v9fs_fid_add+0x231/0x240 [ 349.049206] ? d_alloc+0x28b/0x380 [ 349.049223] ? lock_downgrade+0x86c/0x900 [ 349.049245] v9fs_inode_from_fid+0x7a/0x350 [ 349.068649] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 349.073458] ? do_raw_spin_unlock+0xa7/0x2f0 [ 349.073480] ? v9fs_vfs_getattr+0x270/0x270 [ 349.073509] v9fs_vfs_lookup+0x3f5/0x4a0 [ 349.073522] ? d_alloc+0x290/0x380 [ 349.073538] ? v9fs_vfs_create+0x130/0x130 [ 349.073551] ? lock_rename+0x236/0x290 [ 349.073579] __lookup_hash+0x12e/0x190 [ 349.169330] do_renameat2+0x6c1/0x1180 [ 349.173240] ? user_path_create+0x40/0x40 [ 349.177406] ? __lock_is_held+0xb5/0x140 [ 349.181477] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.187008] ? check_preemption_disabled+0x48/0x200 [ 349.192054] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 349.197597] ? do_syscall_64+0x9a/0x820 [ 349.201563] ? do_syscall_64+0x9a/0x820 [ 349.205541] ? trace_hardirqs_on+0xbd/0x310 [ 349.209870] ? __ia32_sys_read+0xb0/0xb0 [ 349.213921] ? trace_hardirqs_on+0x310/0x310 [ 349.218330] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.223699] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 349.229172] __x64_sys_rename+0x5e/0x80 [ 349.233165] do_syscall_64+0x1b9/0x820 [ 349.237066] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 349.242449] ? syscall_return_slowpath+0x5e0/0x5e0 [ 349.247393] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 349.252249] ? trace_hardirqs_on_caller+0x310/0x310 [ 349.257294] ? prepare_exit_to_usermode+0x291/0x3b0 [ 349.262368] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 349.267221] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.272416] RIP: 0033:0x457579 [ 349.275631] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 349.294553] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 349.302310] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 22:26:24 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c65"], 0x29) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 349.309589] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 349.316857] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 349.324141] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 349.331430] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:24 executing program 4 (fault-call:14 fault-nth:11): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 349.372651] ntfs: (device loop1): parse_options(): Unrecognized mount option fscontext. [ 349.408722] ntfs: (device loop1): parse_options(): Unrecognized mount option fsmagic. 22:26:24 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) sendmsg$nl_netfilter(r3, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14253b6a4ba80000000000000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0xc3, 0xfe, @buffer={0x0, 0xc, &(0x7f0000000280)=""/12}, &(0x7f00000002c0)="523379491c51f448e482d878c1a20a1d29156d07e3334def8d3e9141370f0bf2d4cdfcf014a1ebf40d69c1e3105d59b5f99d96c00ccd078dfbaf059b102063977ba904c18af4cdca570ffd0f53d7aeab76dbdde5a68be27c88d6e4f92a44e231a3630485a86cdb65eed205048a69f4ced1d9626415b681602e1958f4268939a81a5a39bcffeaf8fd41fc0b656ceffa22b8d67942f1c12be02f43521262fb9c3cf17a200b7749f1f4135a5136bf2e14d4d2d38a463ca304b5f9b7ef08523dcc16b741f3", &(0x7f00000003c0)=""/241, 0x16bca000000000, 0x10024, 0x2, &(0x7f00000004c0)}) r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4fad, 0x1) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'veth1_to_bond\x00', 0x400}) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) [ 349.416748] ntfs: (device loop1): parse_options(): Unrecognized mount option . [ 349.442126] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 22:26:24 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x20000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000a80)={{0xffffffffffffffff, 0x6abd4c83f59520bb, 0xffffffffffffff7b, 0x2, 0x8d3}, 0x549, 0x80200000000, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0xffff, 0x101, 0x4}) dup2(r1, r2) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:24 executing program 1: lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r0) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0xb81, 0x0) close(r3) 22:26:24 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x1ff) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) [ 349.508705] FAULT_INJECTION: forcing a failure. [ 349.508705] name failslab, interval 1, probability 0, space 0, times 0 [ 349.527611] CPU: 1 PID: 14020 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 349.535021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.544398] Call Trace: [ 349.547010] dump_stack+0x1c4/0x2b4 [ 349.550670] ? dump_stack_print_info.cold.2+0x52/0x52 [ 349.555869] ? _raw_spin_unlock_irq+0x27/0x80 [ 349.560380] ? _raw_spin_unlock_irq+0x27/0x80 [ 349.564901] should_fail.cold.4+0xa/0x17 [ 349.568983] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 349.574103] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.579677] ? pdu_read+0x90/0xd0 [ 349.583145] ? graph_lock+0x170/0x170 [ 349.586966] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 349.592515] ? p9pdu_readf+0xb6a/0x2130 [ 349.596499] ? __switch_to_asm+0x34/0x70 [ 349.600575] ? __switch_to_asm+0x40/0x70 [ 349.604648] ? p9pdu_writef+0xe0/0xe0 [ 349.608457] ? __switch_to_asm+0x40/0x70 [ 349.612541] ? native_usergs_sysret64+0x1/0x10 [ 349.617143] ? __lock_is_held+0xb5/0x140 [ 349.621229] ? migrate_page_move_mapping+0x1110/0x4f60 [ 349.626537] ? ___might_sleep+0x1ed/0x300 [ 349.630713] ? arch_local_save_flags+0x40/0x40 [ 349.635409] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 349.642554] ? p9pdu_readf+0xb6a/0x2130 [ 349.646602] __should_failslab+0x124/0x180 [ 349.650870] should_failslab+0x9/0x14 [ 349.654695] __kmalloc+0x2d4/0x760 [ 349.658252] ? memcpy+0x45/0x50 [ 349.661557] ? p9pdu_readf+0x529/0x2130 [ 349.665554] p9pdu_readf+0x529/0x2130 [ 349.669380] ? p9pdu_writef+0xe0/0xe0 [ 349.673207] ? graph_lock+0x170/0x170 [ 349.677022] ? _raw_read_unlock+0x31/0x50 [ 349.681198] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.686756] ? check_preemption_disabled+0x48/0x200 [ 349.691834] ? check_preemption_disabled+0x48/0x200 [ 349.696886] ? __lock_is_held+0xb5/0x140 [ 349.700968] ? graph_lock+0x170/0x170 [ 349.704800] ? check_preemption_disabled+0x48/0x200 [ 349.709844] ? check_preemption_disabled+0x48/0x200 [ 349.714900] ? __lock_is_held+0xb5/0x140 [ 349.719018] p9pdu_readf+0xd2c/0x2130 [ 349.722863] ? p9pdu_writef+0xe0/0xe0 [ 349.726678] ? find_held_lock+0x36/0x1c0 [ 349.730759] ? graph_lock+0x170/0x170 [ 349.734593] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.740150] ? check_preemption_disabled+0x48/0x200 [ 349.745203] ? check_preemption_disabled+0x48/0x200 [ 349.750241] ? finish_wait+0x430/0x430 [ 349.754167] ? __lock_is_held+0xb5/0x140 [ 349.758268] ? kmem_cache_alloc_trace+0x353/0x750 [ 349.763131] ? p9_client_walk+0x57e/0xb30 [ 349.767307] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 349.772820] p9_client_stat+0x264/0x720 [ 349.776813] ? p9_client_walk+0x57e/0xb30 [ 349.780995] ? p9_client_mknod_dotl+0x650/0x650 [ 349.785683] ? p9_client_walk+0x24c/0xb30 [ 349.789849] ? __update_load_avg_se+0x311/0xb90 [ 349.794543] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 349.800195] ? v9fs_fid_add+0x231/0x240 [ 349.804199] ? d_alloc+0x28b/0x380 [ 349.807757] ? lock_downgrade+0x86c/0x900 [ 349.811935] v9fs_inode_from_fid+0x7a/0x350 [ 349.816282] ? do_raw_spin_unlock+0xa7/0x2f0 [ 349.821231] ? v9fs_vfs_getattr+0x270/0x270 [ 349.825588] v9fs_vfs_lookup+0x3f5/0x4a0 [ 349.829669] ? d_alloc+0x290/0x380 [ 349.833244] ? v9fs_vfs_create+0x130/0x130 [ 349.837495] ? lock_rename+0x236/0x290 [ 349.841417] __lookup_hash+0x12e/0x190 [ 349.845335] do_renameat2+0x6c1/0x1180 [ 349.849264] ? user_path_create+0x40/0x40 [ 349.853435] ? __lock_is_held+0xb5/0x140 [ 349.857531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.863105] ? check_preemption_disabled+0x48/0x200 [ 349.868180] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 349.873741] ? do_syscall_64+0x9a/0x820 [ 349.877725] ? do_syscall_64+0x9a/0x820 [ 349.881714] ? trace_hardirqs_on+0xbd/0x310 [ 349.886052] ? __ia32_sys_read+0xb0/0xb0 [ 349.890123] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.895513] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 349.900994] __x64_sys_rename+0x5e/0x80 [ 349.904990] do_syscall_64+0x1b9/0x820 [ 349.908888] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 349.914282] ? syscall_return_slowpath+0x5e0/0x5e0 [ 349.919252] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 349.924113] ? trace_hardirqs_on_caller+0x310/0x310 [ 349.929213] ? prepare_exit_to_usermode+0x291/0x3b0 [ 349.934259] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 349.939131] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.944341] RIP: 0033:0x457579 22:26:25 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c65"], 0x29) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 349.947548] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 349.966474] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 349.974209] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 349.981508] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 349.988796] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 349.996089] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 350.003377] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:25 executing program 4 (fault-call:14 fault-nth:12): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:25 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x20000, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0xb, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000300)=""/63) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000060000000300000000000000000000000000000008000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000bd070000010000000000000000000000010000000900000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c964000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) close(r1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x1f, 0x4) getsockname$netlink(r0, &(0x7f0000000240), &(0x7f00000002c0)=0xc) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000340)={0x2, 0x4}, 0x2) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4) [ 350.156407] FS-Cache: Duplicate cookie detected [ 350.161418] FS-Cache: O-cookie c=000000008aa01d61 [p=00000000845ed810 fl=222 nc=0 na=1] [ 350.169635] FS-Cache: O-cookie d=00000000b0f58035 n=00000000f2c916d9 [ 350.169643] FS-Cache: O-key=[10] '34323934393732313636' [ 350.181655] FS-Cache: N-cookie c=00000000c84f3d25 [p=00000000845ed810 fl=2 nc=0 na=1] [ 350.189729] FS-Cache: N-cookie d=00000000b0f58035 n=00000000d017f646 [ 350.189738] FS-Cache: N-key=[10] '34323934393732313636' 22:26:25 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40400, 0x0) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f00000000c0)) close(r2) bind$netlink(r3, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) 22:26:25 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) creat(&(0x7f0000000080)='\x00', 0x0) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',\x00']) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 350.216431] FAULT_INJECTION: forcing a failure. [ 350.216431] name failslab, interval 1, probability 0, space 0, times 0 [ 350.264147] CPU: 0 PID: 14043 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 350.271581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.280951] Call Trace: [ 350.283571] dump_stack+0x1c4/0x2b4 [ 350.287227] ? dump_stack_print_info.cold.2+0x52/0x52 [ 350.292436] ? __kernel_text_address+0xd/0x40 [ 350.296949] ? unwind_get_return_address+0x61/0xa0 [ 350.301898] should_fail.cold.4+0xa/0x17 [ 350.305981] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 350.311119] ? pdu_read+0x90/0xd0 [ 350.314590] ? graph_lock+0x170/0x170 [ 350.318415] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 350.323964] ? p9pdu_readf+0xb6a/0x2130 [ 350.327957] ? do_syscall_64+0x1b9/0x820 [ 350.332039] ? __switch_to_asm+0x40/0x70 [ 350.336120] ? p9pdu_writef+0xe0/0xe0 [ 350.339938] ? __switch_to_asm+0x40/0x70 [ 350.344009] ? native_usergs_sysret64+0x5/0x10 [ 350.348612] ? __lock_is_held+0xb5/0x140 [ 350.352683] ? graph_lock+0x170/0x170 [ 350.356512] ? ___might_sleep+0x1ed/0x300 [ 350.360684] ? arch_local_save_flags+0x40/0x40 [ 350.365286] ? __lock_is_held+0xb5/0x140 [ 350.369368] __should_failslab+0x124/0x180 [ 350.373614] should_failslab+0x9/0x14 [ 350.377424] __kmalloc+0x2d4/0x760 [ 350.380978] ? memcpy+0x45/0x50 [ 350.384267] ? p9pdu_readf+0x529/0x2130 [ 350.388261] p9pdu_readf+0x529/0x2130 [ 350.392081] ? p9pdu_writef+0xe0/0xe0 [ 350.395909] ? graph_lock+0x170/0x170 [ 350.399719] ? _raw_read_unlock+0x35/0x50 [ 350.403883] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.409447] ? check_preemption_disabled+0x48/0x200 [ 350.414511] ? check_preemption_disabled+0x48/0x200 [ 350.419592] ? __lock_is_held+0xb5/0x140 [ 350.423670] ? graph_lock+0x170/0x170 [ 350.427489] ? check_preemption_disabled+0x48/0x200 [ 350.432516] ? check_preemption_disabled+0x48/0x200 [ 350.437572] ? __lock_is_held+0xb5/0x140 [ 350.441669] p9pdu_readf+0xd2c/0x2130 [ 350.445512] ? p9pdu_writef+0xe0/0xe0 [ 350.449328] ? find_held_lock+0x36/0x1c0 [ 350.453406] ? graph_lock+0x170/0x170 [ 350.457219] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.462772] ? check_preemption_disabled+0x48/0x200 [ 350.467796] ? check_preemption_disabled+0x48/0x200 [ 350.472825] ? finish_wait+0x430/0x430 [ 350.476731] ? __lock_is_held+0xb5/0x140 [ 350.480823] ? kmem_cache_alloc_trace+0x353/0x750 [ 350.485713] ? p9_client_walk+0x57e/0xb30 [ 350.489877] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 350.495355] p9_client_stat+0x264/0x720 [ 350.499341] ? p9_client_walk+0x57e/0xb30 [ 350.503511] ? p9_client_mknod_dotl+0x650/0x650 [ 350.508201] ? p9_client_walk+0x24c/0xb30 [ 350.512363] ? __update_load_avg_se+0x311/0xb90 [ 350.517054] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 350.522696] ? v9fs_fid_add+0x231/0x240 [ 350.526682] ? d_alloc+0x28b/0x380 [ 350.530252] ? lock_downgrade+0x86c/0x900 [ 350.534429] v9fs_inode_from_fid+0x7a/0x350 [ 350.538768] ? do_raw_spin_unlock+0xa7/0x2f0 [ 350.543203] ? v9fs_vfs_getattr+0x270/0x270 [ 350.547572] v9fs_vfs_lookup+0x3f5/0x4a0 [ 350.551649] ? d_alloc+0x290/0x380 [ 350.555209] ? v9fs_vfs_create+0x130/0x130 [ 350.559465] ? lock_rename+0x236/0x290 [ 350.563384] __lookup_hash+0x12e/0x190 [ 350.567293] do_renameat2+0x6c1/0x1180 [ 350.571220] ? user_path_create+0x40/0x40 [ 350.575385] ? __lock_is_held+0xb5/0x140 [ 350.579468] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.585021] ? check_preemption_disabled+0x48/0x200 [ 350.590072] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 350.595636] ? do_syscall_64+0x9a/0x820 [ 350.599623] ? do_syscall_64+0x9a/0x820 [ 350.603614] ? trace_hardirqs_on+0xbd/0x310 [ 350.608002] ? __ia32_sys_read+0xb0/0xb0 [ 350.612512] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.617894] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 350.623376] __x64_sys_rename+0x5e/0x80 [ 350.627379] do_syscall_64+0x1b9/0x820 [ 350.631281] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 350.636701] ? syscall_return_slowpath+0x5e0/0x5e0 [ 350.641680] ? trace_hardirqs_on_caller+0x310/0x310 [ 350.646728] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 350.651758] ? recalc_sigpending_tsk+0x180/0x180 [ 350.656529] ? kasan_check_write+0x14/0x20 [ 350.660792] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 350.665668] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.670870] RIP: 0033:0x457579 [ 350.674083] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.693473] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 350.701208] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 350.708488] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 22:26:25 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x0, 0x100, 0x291c99dd, 0x5, 0x9, 0x10000, 0x6, 0x3, 0x4, 0x20}) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:25 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) [ 350.715778] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 350.723062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 350.730363] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:25 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:25 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r2) [ 350.840017] 9pnet: Insufficient options for proto=fd 22:26:26 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) fcntl$getown(r0, 0x9) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) [ 350.923082] 9pnet: Insufficient options for proto=fd 22:26:26 executing program 4 (fault-call:14 fault-nth:13): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:26 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000240)=0x0) fcntl$setownex(r2, 0xf, &(0x7f00000002c0)={0x2, r5}) bind$packet(r3, &(0x7f0000000200)={0x11, 0x11, r4, 0x1, 0x6, 0x6, @broadcast}, 0x14) close(r2) 22:26:26 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:26 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) poll(&(0x7f0000000080)=[{r0, 0x2}], 0x1, 0x8001) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:26 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x10000) r2 = gettid() kcmp(r2, 0x0, 0x6, r1, r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0x40002000}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) ioctl$TIOCSTI(r3, 0x5412, 0x2) 22:26:26 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000140)={0x3, 0x6, 0x8000, 0x7, 0x376e, 0x2}) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0xffffffffffffff10) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000040)={0x1fffd}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x841, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0xb0, &(0x7f0000000340)=[@in={0x2, 0x4e24, @rand_addr=0x10000}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e21, 0xffffffffffffff7f, @mcast1}, @in6={0xa, 0x4e21, 0x3, @mcast1}, @in6={0xa, 0x4e24, 0x0, @empty, 0xff}, @in6={0xa, 0x4e20, 0x3f, @local, 0x7f}, @in={0x2, 0x4e20}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={r5, 0xb76d}, &(0x7f00000004c0)=0x8) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = accept$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000280)=0x10) ioctl$sock_inet_udp_SIOCOUTQ(r7, 0x5411, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x3ff, 0x81b8, 0x480000}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000100)={r8, 0x8001, 0xfff}, 0x8) 22:26:26 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0xf, &(0x7f00004d3000/0x4000)=nil) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:26 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 351.251593] FAULT_INJECTION: forcing a failure. [ 351.251593] name failslab, interval 1, probability 0, space 0, times 0 [ 351.264453] CPU: 1 PID: 14105 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 351.271842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.281217] Call Trace: [ 351.283837] dump_stack+0x1c4/0x2b4 [ 351.287494] ? dump_stack_print_info.cold.2+0x52/0x52 [ 351.292722] ? __kernel_text_address+0xd/0x40 22:26:26 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000180)={'broute\x00', 0x0, 0x4, 0xc3, [], 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000080)=""/195}, &(0x7f0000000280)=0x78) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) [ 351.297251] ? unwind_get_return_address+0x61/0xa0 [ 351.302216] should_fail.cold.4+0xa/0x17 [ 351.306314] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 351.311452] ? pdu_read+0x90/0xd0 [ 351.314930] ? graph_lock+0x170/0x170 [ 351.318752] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 351.324307] ? p9pdu_readf+0xb6a/0x2130 [ 351.328332] ? do_syscall_64+0x1b9/0x820 [ 351.332419] ? __switch_to_asm+0x40/0x70 [ 351.336501] ? p9pdu_writef+0xe0/0xe0 [ 351.340318] ? __switch_to_asm+0x40/0x70 [ 351.344398] ? native_usergs_sysret64+0x5/0x10 [ 351.349001] ? __lock_is_held+0xb5/0x140 [ 351.353082] ? graph_lock+0x170/0x170 [ 351.356912] ? ___might_sleep+0x1ed/0x300 [ 351.361081] ? arch_local_save_flags+0x40/0x40 [ 351.365678] ? __lock_is_held+0xb5/0x140 [ 351.369766] __should_failslab+0x124/0x180 [ 351.374025] should_failslab+0x9/0x14 [ 351.377844] __kmalloc+0x2d4/0x760 [ 351.381396] ? memcpy+0x45/0x50 [ 351.384686] ? p9pdu_readf+0x529/0x2130 [ 351.388677] p9pdu_readf+0x529/0x2130 [ 351.392503] ? p9pdu_writef+0xe0/0xe0 [ 351.396323] ? graph_lock+0x170/0x170 [ 351.400133] ? _raw_read_unlock+0x35/0x50 [ 351.404308] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.409863] ? check_preemption_disabled+0x48/0x200 [ 351.414895] ? check_preemption_disabled+0x48/0x200 [ 351.419940] ? __lock_is_held+0xb5/0x140 [ 351.424028] ? graph_lock+0x170/0x170 [ 351.427861] ? check_preemption_disabled+0x48/0x200 [ 351.432893] ? check_preemption_disabled+0x48/0x200 [ 351.437953] ? __lock_is_held+0xb5/0x140 [ 351.442051] p9pdu_readf+0xd2c/0x2130 [ 351.445892] ? p9pdu_writef+0xe0/0xe0 [ 351.449708] ? find_held_lock+0x36/0x1c0 [ 351.453831] ? graph_lock+0x170/0x170 [ 351.457653] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.463214] ? check_preemption_disabled+0x48/0x200 [ 351.468250] ? check_preemption_disabled+0x48/0x200 [ 351.473286] ? finish_wait+0x430/0x430 [ 351.477203] ? __lock_is_held+0xb5/0x140 [ 351.481306] ? kmem_cache_alloc_trace+0x353/0x750 [ 351.486177] ? p9_client_walk+0x57e/0xb30 [ 351.490348] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 351.495849] p9_client_stat+0x264/0x720 [ 351.499843] ? p9_client_walk+0x57e/0xb30 [ 351.504015] ? p9_client_mknod_dotl+0x650/0x650 [ 351.508702] ? p9_client_walk+0x24c/0xb30 [ 351.512868] ? __update_load_avg_se+0x311/0xb90 [ 351.517558] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 351.523203] ? v9fs_fid_add+0x231/0x240 [ 351.527196] ? d_alloc+0x28b/0x380 [ 351.530763] ? lock_downgrade+0x86c/0x900 [ 351.534937] v9fs_inode_from_fid+0x7a/0x350 [ 351.539279] ? do_raw_spin_unlock+0xa7/0x2f0 [ 351.543712] ? v9fs_vfs_getattr+0x270/0x270 [ 351.548079] v9fs_vfs_lookup+0x3f5/0x4a0 [ 351.552163] ? d_alloc+0x290/0x380 [ 351.555724] ? v9fs_vfs_create+0x130/0x130 [ 351.559971] ? lock_rename+0x236/0x290 [ 351.563899] __lookup_hash+0x12e/0x190 [ 351.567804] do_renameat2+0x6c1/0x1180 [ 351.571742] ? user_path_create+0x40/0x40 [ 351.575915] ? __lock_is_held+0xb5/0x140 [ 351.579996] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.585560] ? check_preemption_disabled+0x48/0x200 [ 351.590616] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 351.596182] ? do_syscall_64+0x9a/0x820 [ 351.600178] ? do_syscall_64+0x9a/0x820 [ 351.604189] ? trace_hardirqs_on+0xbd/0x310 [ 351.608523] ? __ia32_sys_read+0xb0/0xb0 [ 351.612602] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.617979] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 351.623463] __x64_sys_rename+0x5e/0x80 [ 351.627467] do_syscall_64+0x1b9/0x820 [ 351.631374] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 351.636759] ? syscall_return_slowpath+0x5e0/0x5e0 [ 351.641709] ? trace_hardirqs_on_caller+0x310/0x310 [ 351.646744] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 351.651774] ? recalc_sigpending_tsk+0x180/0x180 [ 351.656543] ? kasan_check_write+0x14/0x20 [ 351.660812] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 351.665701] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.670904] RIP: 0033:0x457579 [ 351.674120] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 351.693048] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 22:26:26 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) fcntl$addseals(r0, 0x409, 0x4) close(r1) [ 351.700808] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 351.708092] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 351.715406] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 351.722707] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 351.729990] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:26 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:26 executing program 4 (fault-call:14 fault-nth:14): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:26 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000100)=0x4, 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r3 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x98, 0x881c1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x0, 0x1000}}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000380)='tls\x00', 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) syz_open_procfs(r5, &(0x7f0000000340)='net/igmp\x00') write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r4}}, 0x18) fsetxattr(r0, &(0x7f00000003c0)=@random={'system.', 'tls\x00'}, &(0x7f0000000400)='/dev/dsp#\x00', 0xa, 0x2) ioctl$RTC_WIE_OFF(r3, 0x7010) close(r1) 22:26:27 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:27 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x80, 0x2, 0x3}, 0x6}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:27 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x42, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x22) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x100, 0x0) close(r2) [ 352.000300] FAULT_INJECTION: forcing a failure. [ 352.000300] name failslab, interval 1, probability 0, space 0, times 0 [ 352.062612] CPU: 1 PID: 14129 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 352.070051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.070059] Call Trace: [ 352.070088] dump_stack+0x1c4/0x2b4 [ 352.070112] ? dump_stack_print_info.cold.2+0x52/0x52 [ 352.070133] ? __kernel_text_address+0xd/0x40 [ 352.070164] ? unwind_get_return_address+0x61/0xa0 [ 352.070191] should_fail.cold.4+0xa/0x17 [ 352.070214] ? fault_create_debugfs_attr+0x1f0/0x1f0 22:26:27 executing program 1: r0 = socket$inet6(0xa, 0x100000000004, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000080)=""/169) dup3(r1, r0, 0x80000) [ 352.070244] ? pdu_read+0x90/0xd0 [ 352.070261] ? graph_lock+0x170/0x170 [ 352.070278] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 352.070292] ? p9pdu_readf+0xb6a/0x2130 [ 352.070307] ? do_syscall_64+0x1b9/0x820 [ 352.070401] ? compat_start_thread+0x80/0x80 [ 352.091095] ? p9pdu_writef+0xe0/0xe0 [ 352.091119] ? __lock_is_held+0xb5/0x140 [ 352.091131] ? graph_lock+0x170/0x170 [ 352.091169] ? ___might_sleep+0x1ed/0x300 [ 352.091188] ? arch_local_save_flags+0x40/0x40 [ 352.091206] ? __lock_is_held+0xb5/0x140 [ 352.143002] __should_failslab+0x124/0x180 [ 352.143021] should_failslab+0x9/0x14 [ 352.143052] __kmalloc+0x2d4/0x760 [ 352.143069] ? memcpy+0x45/0x50 [ 352.151017] ? p9pdu_readf+0x529/0x2130 [ 352.151035] p9pdu_readf+0x529/0x2130 [ 352.151058] ? lockdep_hardirqs_on+0x421/0x5c0 [ 352.151076] ? p9pdu_writef+0xe0/0xe0 [ 352.151090] ? retint_kernel+0x1b/0x2d [ 352.151110] ? trace_hardirqs_on+0x310/0x310 [ 352.198990] ? graph_lock+0x170/0x170 [ 352.202811] ? graph_lock+0x170/0x170 [ 352.206638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.212211] ? check_preemption_disabled+0x48/0x200 [ 352.217264] ? check_preemption_disabled+0x48/0x200 [ 352.222320] ? __lock_is_held+0xb5/0x140 [ 352.226402] ? graph_lock+0x170/0x170 [ 352.230230] ? check_preemption_disabled+0x48/0x200 [ 352.235268] ? check_preemption_disabled+0x48/0x200 [ 352.240346] ? __lock_is_held+0xb5/0x140 [ 352.244440] p9pdu_readf+0xd2c/0x2130 [ 352.248316] ? p9pdu_writef+0xe0/0xe0 [ 352.252142] ? find_held_lock+0x36/0x1c0 [ 352.256235] ? graph_lock+0x170/0x170 [ 352.260068] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.265675] ? check_preemption_disabled+0x48/0x200 [ 352.270718] ? check_preemption_disabled+0x48/0x200 [ 352.275760] ? __lock_is_held+0xb5/0x140 [ 352.279858] ? kmem_cache_alloc_trace+0x353/0x750 [ 352.284744] ? p9_client_walk+0x57e/0xb30 [ 352.288915] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 352.294393] p9_client_stat+0x264/0x720 [ 352.298376] ? p9_client_walk+0x57e/0xb30 [ 352.298398] ? p9_client_mknod_dotl+0x650/0x650 [ 352.298412] ? p9_client_walk+0x24c/0xb30 22:26:27 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) fcntl$setsig(r0, 0xa, 0x33) poll(&(0x7f0000000080)=[{r0, 0x4}, {r1, 0x690}, {r1, 0x6100}, {r1, 0x4004}], 0x4, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r3 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x9, 0x101040) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) close(r2) r4 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0xa) [ 352.298429] ? __update_load_avg_se+0x311/0xb90 [ 352.298450] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 352.307313] ? v9fs_fid_add+0x231/0x240 [ 352.325686] ? d_alloc+0x28b/0x380 [ 352.329245] ? lock_downgrade+0x86c/0x900 [ 352.333429] v9fs_inode_from_fid+0x7a/0x350 [ 352.337770] ? do_raw_spin_unlock+0xa7/0x2f0 [ 352.342207] ? v9fs_vfs_getattr+0x270/0x270 [ 352.346557] v9fs_vfs_lookup+0x3f5/0x4a0 [ 352.350627] ? d_alloc+0x290/0x380 [ 352.354194] ? v9fs_vfs_create+0x130/0x130 [ 352.358447] ? lock_rename+0x236/0x290 22:26:27 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000080)) 22:26:27 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @broadcast}, 0x3, 0x4}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="94d082783aa78c349c89479a55af2ceee9d5fca42680e24200fdadfcd8b7cb39ee286fb6c3fac22309401131358499fb964dd11bc27c4087d291", 0x3a}, {&(0x7f0000000140)="4ef5bedb5f7355fcf634c8090309acf30bfef5c602fb05d1e7f70713ec40194676a11a3c9ec636f0b6ab1be00e4f5b8bfedb73f5a5c0958b5fc3f1d3c82db349494d85281bf7adc9308f6ef2b6a0be333e8974969c578d0cbc7871d672d255be6a5d7aab4b73f13aacd007d94d4743986e796d5b79094df4a6a0795ba22d5ef10a97ea99f6561322b0f10026fffaec984dab1ea82023", 0x96}, {&(0x7f00000002c0)="b1da7bb35f95e5e9c94dbc281558d5dd1c0497cde65123015b8addd54018a2d9fa0d51b9fabed83103da7f19357f46e3376d49500ef18b8d6a91beac85c9717e8d08eb1ed40194d9a77f4c1be8562070877ac0d5269cc770eadccd405a740c333ccf0153437c153366956cf96a80da60b21b51892ceaedb463e53d31de8e7472a3b78d53a335b2968a35c2a5909e1022206c9de1e64ea4ab5cf452d8f3244495f151c55d6d7a5308c348ed2a2619a6cf28e57dff132de6934f67388e5b3c214776f8656425f4c46cbd8aa3b29c88de03616cb8bbb5f7492c96099edf399d7be8c47c4d4411b354ec429d7b10ed7870854d", 0xf1}], 0x3, &(0x7f00000003c0)=[{0x98, 0x119, 0x6, "1ddb40722f0d711fc1b9085fa19800252a9e65c0c4b0f2e7c5a166f2f9e2a9ea298c7eae19dff2a3a2452b393f0952f6243ed90e5d13dccd8ec0cd2456b9519db6b70d8a534d0428af64f3a953653ab24e9a798f4df023e6597172f7bd130cbac110de942c868463e2f27e46a2c7d7cc69b8155cd13052e2911b583d57cdfcafba60a310db"}, {0x48, 0x101, 0x80000001, "01a74040d4edf9e4de84730bbf49b71ef265216a4addbe056fe54b1cc28eb61e07b8fa91d68fa3feec035a96be45e896e657fa764f32"}, {0x68, 0x6, 0x3f, "1080fb6f101800c261838c9eb86d70d60b7459f8d5fb6eea47d3a765152a532704a58a9da09cb1305f38423ca678d83376217d8fe45303cc95ffe6d4414e4e6aaf65e5ad2f5200427cf63df08e31e617d697368347"}, {0x38, 0x11b, 0x5, "353c11bf9994b9139febcade536a00413abf9857b7bd4d1065c066a90eb05247f1c0fd0f1152"}, {0xd0, 0x117, 0x8, "cb433bbfb3e529648f9e2ce22bf96dd586e44d09247708ef6e43b223ad8a2a10bac21f32bc70027cf69d9811592ccde03cdc5456ada43a8a1c97c409935e14d682d38c5ed18ef3156a28a66d26f691e7a52fef4cb28b76369bea5bd6ba4ed552a4d765827053003f20494802a884a339205fdfc18f5ca43a58c9d70d9dd39fa4c3ae8af724281d3dc88f9142a856404679a7cadf99ab9a8a5abf4578c903f817f3a475784d6269564c480019f32091bdcbe75333cd8e411063"}, {0x90, 0x1ff, 0x21, "6c3547838f52eb7a90d2c6087f7c7ef3160d9ad9d2cc78da8928535c15a5a68c0f701893b49a0afab9ce6f229451d22d4001d8d91b227209abc85cb1aa5399b2d7df000f03fce8165a313534a25dcf52f10d4d46c21d9d0f1bb21d8d13766e2c2e48520f368958b8d087e675eb0e0eb8330327eb5e5e547c44"}], 0x2e0, 0x800}, 0x2000000000040000) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) fdatasync(r2) r3 = syz_open_dev$mice(&(0x7f00000006c0)='/dev/input/mice\x00', 0x0, 0x80) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000700)={0x1a, {{0x2, 0x4e21, @remote}}, 0x1, 0x2, [{{0x2, 0x4e22, @local}}, {{0x2, 0x4e20, @broadcast}}]}, 0x190) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) [ 352.362356] __lookup_hash+0x12e/0x190 [ 352.366268] do_renameat2+0x6c1/0x1180 [ 352.370200] ? user_path_create+0x40/0x40 [ 352.374368] ? __lock_is_held+0xb5/0x140 [ 352.378458] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.384019] ? check_preemption_disabled+0x48/0x200 [ 352.389073] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 352.389092] ? do_syscall_64+0x9a/0x820 [ 352.389107] ? do_syscall_64+0x9a/0x820 [ 352.389127] ? trace_hardirqs_on+0xbd/0x310 [ 352.406947] ? __ia32_sys_read+0xb0/0xb0 [ 352.411033] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.416429] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 352.416455] __x64_sys_rename+0x5e/0x80 [ 352.416476] do_syscall_64+0x1b9/0x820 [ 352.416492] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 352.416513] ? syscall_return_slowpath+0x5e0/0x5e0 [ 352.440134] ? trace_hardirqs_on_caller+0x310/0x310 [ 352.445708] ? prepare_exit_to_usermode+0x3b0/0x3b0 22:26:27 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 352.445727] ? recalc_sigpending_tsk+0x180/0x180 [ 352.445743] ? kasan_check_write+0x14/0x20 22:26:27 executing program 4 (fault-call:14 fault-nth:15): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 352.445766] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.445792] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.445804] RIP: 0033:0x457579 22:26:27 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) ioctl(r0, 0xfff, &(0x7f0000000140)="d2725e46669c63f0e9e55bab29d30dd45363dbbc5d354f5fb4f7a81d7002c91d4097f6eae92a364325e20d8fa90a65212dcbe911d820406f62fe749cadf95cd03ea6941f3b970095cd329c448d8c6777f0485a79cec5d9c4892a934575eb08caa994b02bd3a9f89f2736f84911d56e32a2e91095e5f24a93f0f6ff96c03847530106da2e92b81b53f32874e1304d8a520f9fa0239cf444690f9df93c5dedd58471dff2c5f3b787e53c110414750eaf46ad00") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/4\x00') ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)={0x0, 0x2, 0x8, &(0x7f00000000c0)=0x3}) [ 352.445821] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:26:27 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:27 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640)='/dev/hwrng\x00', 0x200100, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000c40)=ANY=[@ANYBLOB="d70000002902000002000044020000000500000000000000b62ad224000000000107002e2f66696c6530800100000005000000000000000000000000000000000d002e2f66696c65302f66696c65300c0400000007000000000000000800000000000000010d002e2f66696c65302f66696c65300202000000fcffffffffffffffffffffff000000000607002e2f66696c6530040300000008000000000000000500000000000000200d002e2f66696c65302f66696c65310201000000070000000000000000000000000000000107002e2f66696c6530"], 0xd7) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="2a000000290100fdcf0f348fee000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r2, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000900)='/dev/autofs\x00', 0x8100, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xffffffffffffffe0) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r2, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r2, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r2, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r2, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000500)='tls\x00', 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) setxattr$security_selinux(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000340)='security.selinux\x00', &(0x7f0000000600)='system_u:object_r:logrotate_exec_t:s0\x00', 0x26, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f00000004c0)={0xff, @loopback, 0x4e24, 0x2, 'lblcr\x00', 0x20, 0xcc, 0x1e}, 0x2c) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000007c0)={&(0x7f0000000780)='./file0\x00', r3}, 0x10) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:27 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 352.445830] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 352.445848] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 352.445857] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 352.445867] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 352.445876] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 352.445886] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:27 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) clock_gettime(0x5, &(0x7f0000000080)) close(r1) 22:26:27 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x9}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:27 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 352.804183] 9pnet: Insufficient options for proto=fd [ 352.823728] 9pnet: Insufficient options for proto=fd 22:26:27 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000080)={0x1ff, {{0xa, 0x4e22, 0x5, @loopback, 0x5}}}, 0x88) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0xe9}) 22:26:28 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="560000007d010000005f00000000000000000000000000000000000000000000000000000000000000000000000000e8030000000000007266646e6f05007266646e6f110076626f786e657431747275737465646c6f"], 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) stat(&(0x7f0000001e00)='./file0/file1\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x92, 0xa, &(0x7f0000001d00)=[{&(0x7f0000000600)="cd634fa196345195e44efd57e924c81d5fa59caf5282d670bdd40a612f8519597a74a3594191101cd038bf43e32f9b9b14c629566a3adacc94e6b3596df37a752eab38bd6d", 0x45, 0x2}, {&(0x7f0000000780)="4870e12d72c96114f1104aaf792a22c066bcdfc5a6fcef679ffca52eccebbbc7ab3aa7a52da8e7e08229f6ee38412758e632c1da85f3d3770d2bde12c6c29104ff426434ca818c6279ddf7d0b6bca480d327", 0x52, 0x5}, {&(0x7f0000000a80)="c924c9a812003ccff63be1997cc6599efb079073fc55b4f0d10a7d929f1e76cccb8d2dbdad6b2d5cb2f249331a62eb6b144d729fa462ef505bdfdde414b92dfd0b0f8c6d0a7b7732b8688b0fbf82afa946032c1cec7df90db55039cc64a9d621a39e675b71805c23243d2a82cfe32f5522cdd228b67927a8751448ddb00808821586fa0e12d7332caa6100509fdf8b193b58588350bd1d9eac43a997f5bdead8d47d6ac66bc39d8e193119d43900e47b488da9acbd138d93cd13000e2d7b1c6fdb962281e20b4c80af499a188af8bbb28b67663857fadcaefb6375a55b621a8a52f1361c6b207df5fd1dae2c06b51a49890a44f7fe9183204aca8b1012763ce64ba7e8e0026ea7abf672a02a74382f615bef846c2ff91c7d591195b4cf08e6d2e4ca5770edb8dce8ef6b62c4853673fbb3aa1e920bfb0802c3857b4faca0a71c148dadc7137e913454f86559c698f071f68f83cdffb16c068d58291272a0f969bd8894a95cf3ff83c7c1ae45940428f9ef5823eb231518665e0607bf0be9e2c43ed588d8ab3ddf875bc232be59dacbc8313f3e86b1706d3610fd1cf0266a22a92ec04826937d35138fdde8f87e9fc966c0e1e68acc1148dbda5ffe7d24db9718cddd72f7aa15fcb25cea73a5aadcce9e454b53f68b433ad29a09c30fbce33a4dc2a7389ef89ade0b4997783ccfb2cd54651e851dd0c58e716f734c5a64c32268d91118946450d9f301783d557226674d30fa201303c2d5648abb199d19dcd82c068abc7028f6a45725ff3e3d9cb08b0fc8d3029898459e0faacaf15597fd449fdac571e12410fa4b67f84ffcdc0f1a8514e5436a6c9352b9708dcebf9ac563ba96c03795ce3b8063426ff2a6d8cc3ff4704efb91fe11e4d18e45534d640ad1f4871c15d0575072cb58a73a2122f655f612b1742d3b9a8d3b6738a7467886d7d6d7bdad490229a3269f9b0cdc72d51369ac5adc35a48d8bea64c9aa4ca255c16c04273c570b29356d1805e1ce615430bae69f062871d1be72c6a4c824adb25fe425405a66cdbe6fe5349a5a63ee47fd75a61b2a895c15398a4ff32f6df9ba8aa1d1cfe4f1e06d53a7a28947855a483f6bf583bed6a7f2e4a60701866ad08e9543e4537c021f504385ad25d4a396d58e63936cc3136a04a4a0bb9aa59aa0b63add00ffef6eb9153a9c2c58f6f70ab147cda91fbd7072a7314415f208617319f5652cfdc546d8133e492b11b843f7ca27bfa91b2d668febb9da74d824c1afbe9f23bfc7bee849dbf9d33cf009d883d706859fa6af21cc5f523550d4f7e7c1ca136a83c07888accccee233cc916ddf68f8ce665b8bacfa6e2f317fc9ad7f7c6c3ed1f141043828a41053ab120e3e50ca4fb0c427135f6c248f93731fc5edb843196f8f6e77b16651581934f96322fe797b902364c60bd73bf57fe2508b80cd10f02c35ee41be069129c86837ecae0dc2204b83b75ab10228492e07a1066c61f1610c48687b69eba3a441917aa730469e2ddb8f374907465a22dd8e70349086d022510bcc0bbbae4910ee3733d7744c6d0b9ffc861cbf334786aa0f78b35abb2d1921dfc1b322c14b9b32bc52477b88db6626604d10c909ae77c90444aed11fd0f62d49658b565d3443dedab215c1713acd68f7c260562ee8eaa49e2d46a0d6c776e04a1087d331c6abb92e9fd1d4f6db4f274fc72ae51bfe853f70028c2c3342238f8f9ef15ae77bd172a0716f854bbc61af1fedd2024a0d759f99ff5f724921bed6cddaf86ab0deefe83bae41e7e40e3a2c20039cb24cf48cc051dc3fdba9d54f534dd0adc8347a62941bef2cfe55e17a9c861223e54c927c8d9112838e03ce2f2473c00f66db38966133e96f67c192ab47ab4f90ec3aa9166be55a9e54e3a582521ce99e17c5b63f5678e8d323d78446c86c355568d0e8d35fe167a1d02ed70fdd6fe177fc2d87ef293357fe0ea3fa980fa49e985a14a5f2a23443bc18091e1e4b79dd5030194d3324eed9e744a7ae338a9a0c79f65b01d5fe797f4cb677ab18cd67e6301a6c688417fd942551521d9520000880f97b620ac0ac370044edeb417c24150e03f85a47b150284584f65a02ccaabc058045a056464ac5331e43ebe02176ded61cde44e0b28fa2d7e34a50a75e7c7cfbc5ca03143fbc339502b1f778beec998b487f1bd6c08ce34a1e44a1a4b6aed97ca73764abe25dc86ea96b94b26bde8a4b4b8a5de528a0a051d458537ef44c87207b8b6acc0a81f9d727aada013bb62300f73e93c24b64487c9ccd5e35a6b6e2f57553bb3622a70368a133c8b07cb6adf45cf9fab03c96cd15ae934e229395ca927a2576b6f7ca3ac45fff0406e177200784feb8e6841cdb7402b737f9ad83c3e4968a3c2ac29523696e15c9003e56a5c7283f6bf00c3250f39924834b145384a66462f313948fb0efe07e6c3e75e2b32a41451795c712f4b289205412a2ca35de17b170234cf5fefa6554ed884b32351362b5887f30f96086a4591153d7e3d7350405c8e87ee0d643aeabc131f26e034f2d8b75bc42df8e078bde011fc885177ea746045a46c2180f7d61673133549f33642309d64b54cd4dba65cc43d259b18d9559fffc7e27ff139bf6172a4bce45f1d05a7a5308b8c2e0bb35e507223e52d64debca531427a32425721db1837663ab2aefb6505112d302be83ad65378eda9340ee7688424f1a5c197cc2739653a4316db2bbd8eae03aa185f2ab4bb230080d422d1523ccdebb3057a83a8a159721dbaa4cca92a3aa694641f25c926c74ab0d981013cad174d32122703460bbf5cb81d4ec511c47eb8ebe92db167be3147a0e3fe737b9c90bcf0dbca73e9f8b7f1a65f864e4951225dd43a11387772258ac2b6e648a87f9b04616fe5071debabe14f2a16d8adfe513052796cb41e131faeffdcb8f96356979e0d2f477207e44de931a77018eb5ab6f089c06d86334dbf05a207905794f211187ec91a545eebab12fce6bd939b18c21ffe35deb9d75a6c7c90abcd36eba103b4dc592b3aea3f3bcca9a5668c18be0f872c269c716d45f5cf20be28e9a98ad19807d6d52361943c1da261d9ed49e28e3a1eeb46cfbb6bf1d741fbcd87fc55ae3b8614c60f4e601d631ff4bd6f06088155b57fdb5dde040f88c962e6582ed39a7130b7a09a3d9491a69080793c14f619f8981b47093c7f5858745a74ba349e681afeebe96e2f8f3041bfe0cf8cebcd6a57fd2c4f3a0ec224f64b1f0348fa62b368f4b596b13c6cec71fd56bd95497b949a4df3b819c85323f65795494801e6f9602e6a5020ab6c3e4253142e2255e485d2c69f24989c2487abdabcbe825dbaba9696df0f360af671003bcd50184aa4881972b45a2f81cd191e633d434c2b8926265ad8f1f1c8fe4aa17f6953290b19a9e42d9a493d377280b3a72e15bc3084df807f023d0f84a29ff90562eeb65e6ec7b673be33a960872f54f6f7f1d9a53c628f63ce4cc974685050f447a372b877e1dc374973267172553ad7eea162905882b3980ca1b666157a4a3b685e4b5d3ff0da9d28e286fda6723aeaaf67e1b049f7cfba2fe77e3291b9ab7f5f863248d2a202334e06ae29529fc115e2c211c9b9a92d5d67aff7db684442a0efdbac73351947dd13eb5fd803b79d5b8e57ea4260b8d6bc64f6fe2577bfec03966a5b0c70afd5595c1bc7eedca3ef264197a9cef69176ae81031e9154263dfb50fb07d380189ed0a80786a8207133c71215f897d5a8e98957cb681b3dbe68388a05e14a8cc9789fb79d0004d89d4a7e3862c68fa2b7a713751c4111855bc25b27470116e7756950ec88605d43b831f095ca83b86f77367f8e1282850baa2c3ba49b9cf2675c60b532781423e0e4e0fcb18e9f13bc2cce2552746d55bd3f0ee03e7aca109fdfaeda248e1efc6bd4ab08545207d63ed808b1725c442b29c4149cc48cb1d43e7406ab00ff92ea3468fb973ce77287e70e2827095d451e46b5afb5d341c82a4b0f5ead38b58e0beae10da587380a801da659ff7dbe28e469ba482dd4ba6ce06c5940f1f37e237d8dd0343678509ee9749b9eb132ca4b572f2e63dff5ce8367394e8e92fdcb11e0b64a614d0ea9f57a86e91d54675943f384a26e9a74b75f743c7fe6ed317183cb4f34060d81c217d833ecf7e2ffe8387c431af05eac6ab8ab05757e36381db875a921268f19a994bbc18e1c3850129356ce53e40f50be05284088f9fac9ada45fae2a0d597ef0b726188da739b72441026e82645a5fda99a8cda05a586e9fbbdfe660e63cf5eaab5ef0205ea1173402c18c54da1df71aa0669de54bb6e51bbcdb5a7ebb1c8e9e31fe36cdd7c4e7ca640b3a855d434aaf9fea79b34561aa2fceb773718d9e6735e220acfe976b4eff2b9376351c7603d2954a70e84372e204abcf669494e785c67ab6d82c1370d971b0c527294f83bcaa99618b86ceecb7d0e39de6e034569217983d1056abf642f5a67a2508fb5118bb1d2a83deb6213fc73157ab220dfce26ef9b02d032c5be42fa70b7b2b379c67dcde88781946440eb7c71510324131e64629af4c8c240f4956af1cabd72c777a118d14c4505eb44fe6bab3c8021b06155945eac13a0251c631c8d20e0652876f603b43ef912d6ec6b73919afa9009cbd166a3c6064b3df74bfb1313ba8cc0d73f6f182c459713b2977815679ce556fd87ad31fedd464c9d977a0b87576ba6fb82b90994a97731a4d0bee44f01b821ec1d9c35c1737d8a7e607758bf67261cc09315681f04bd8bbf96deb9768113d70c81bb8c41289a9b5cf362fd5938b315974479aa92adec714707c5be53e22c08c6b2f32707fb3bdd83a0cff2a5386a607986a31d33c7ef3d4abc0f1916b32ae7299233b2ad0ddde33ef68bb9b01f34fe2b75f4f56196df52fca17ad24dbaf51bffd06c6532416ca790e4a0ee6338402370069ad52fdcb2f21ca5b4765571d142b217f8c040de1a4c61d93ea4f66369c9fcd74cd725ab81733c35a0d08061403d45977486f30d7741d470f238c349007bcf775c16fb1eeaafbed2d255a525237d5a708b2c300d081d14dbcde5faa6dcda61ddd931398d7df3e777dd74ed282c039506f41a926e1d13a4e8e1e5cd76465d1f96b8280fc6190473791e75bfcdcbf57a6a48046a25eeceffffc2f77ec422f249b787246b96e408ed18c017a544ea7bff7a635d166f2a3beeed487967a8b760b2c0b19ac23c51557f808c462abe1250d4d8a8aded1c3da32c3d75467c687a8b2552e6dbc131450b0389b28122fa6dad5a9220627722ceede917adcd45e2b331e5a867851e9f2f38259f1e7f5c677daa45e98a6bda999b1621760d56c6e526e3cd63e9a1fe2b412e48d5eeb857164338efeb734ea858703fb636a5578234db07bb1380fb088772b72d50e1443ce75d1fdf321150dfbd5ede4428c39d1317ed9a1f7342d87136f94d1c80870a651b563e2ff63c8645d9b299560405fe555351a2fa98bb3213a4440a7e17797ce05e7f122f85397e2f5a0310506e8c31304b8da235e983754a0238a16677152993631b1f7af7e98602b1e381a06724486e11ebe5feb884f8078ea0ce0cadd2987a1fcaa47d4ff5720e40c6cfb6f7d84bae50dad2e4e940c8b2aaa8fc390bf6ecc8903f870ce0df28035bcda2ff66860cbad61005f2d33cb30f649315f5afd600af71ea79e3d9cf6e81597cb3d9f492c3b8c6c7f630e906bd33c9d6e6d2308f2309f0cd4f76011697afdb0f7f24d48e9fd88b146eaee4e1d4e588aa6de13009f312784fdad72879b23d752f039cce3f447c7d", 0x1000, 0x3}, {&(0x7f0000000900)="91b07b84f89e190ee5599fb2183482b68c825b265a257d6ecfe553157bce6131c74defcef6d4855f9691973a6e", 0x2d, 0x3}, {&(0x7f0000000940)="70503dc6e0d94f898b9c349c1909c1e223c4325753c9e813c116b38353204d7c345c0fcf703e7dfd532922137fa4caf87ddb11709b1480ecf2d2166624a144b6ed92a00ec17cea3a3678053927453949d56d97187946543d2ceeabeda078a7fcfb0375b1ea83893f94054bbee764bababf7e2b50a4510f7f5531", 0x7a, 0x800}, {&(0x7f0000001a80)="a966d29d3a957492aad2affc34663abd81ca179ccfd996f3d9706d032347770c8b847cf2a25cdcd7c8f5e71208d755b19945396f00ce4659f7b37594858e", 0x3e, 0x3f}, {&(0x7f0000001ac0)="97516dad54a3ba4d9bacf92751b7b0e6e2dac8a7d1f1914f64fe34c827029cba32aef7bbcb3014137c94b107d53e88c976baa2070326744e57ba3a9d4daaba6a2736b34213695cb58c252300b8829bdc7bf2fbf84ee9a6c0d74944eee85b559987ea7da03cce043ec22a26ae6d7439da6efcc518fbcefd7b3165c23e0f19a724e6bbab2e205c306a73ff8ed4ac6f73b4a85f3d3795a8d5069ee3a61b7c3ec0a239ae2541df1f112597d9cc0afd80", 0xae, 0x8}, {&(0x7f0000001b80)="22de08ec3d", 0x5, 0xff}, {&(0x7f0000001bc0)="09ac2fd5d6a35d730a4fec2f0782d270a265f40db1e80e5c9dfb8510a1499e826da70f1a34409ccb0b89d38185df339697e6798fe31087a94b2b433d8156be8bc86b435c8eacc0bf3f8d0f52ad2ff0ce208748357e056274f0583abd6d19acb0af7a0281b45955cb833e281933690ebd77e09fbfb3eb08a920b6b9205daefe650fe8332f6760d00a147576236ca79c65b6dee1a8a0310a31f126338adb090ca2767c4787c0cebca3e3a10090d84f146cd8c696f381ad921079c3e9429b0c3549b4e7f2", 0xc3, 0x8000}, {&(0x7f0000001cc0), 0x0, 0xffffffff}], 0x40000, &(0x7f0000001ec0)={[{@norock='norock'}, {@dmode={'dmode', 0x3d, 0xffff}}, {@map_normal='map=normal'}], [{@smackfsroot={'smackfsroot', 0x3d, 'id_legacy\x00'}}, {@hash='hash'}, {@smackfsdef={'smackfsdef', 0x3d, 'trans=fd,'}}, {@appraise='appraise'}, {@uid_lt={'uid<', r2}}]}) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 352.907622] FAULT_INJECTION: forcing a failure. [ 352.907622] name failslab, interval 1, probability 0, space 0, times 0 22:26:28 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x90801, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000002c0)=""/4096) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r2) [ 352.975920] CPU: 1 PID: 14195 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 352.983682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.993060] Call Trace: [ 352.995765] dump_stack+0x1c4/0x2b4 [ 352.999427] ? dump_stack_print_info.cold.2+0x52/0x52 [ 352.999462] should_fail.cold.4+0xa/0x17 [ 352.999485] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 352.999511] ? node_tag_set+0xc6/0x170 [ 353.008784] ? graph_lock+0x170/0x170 [ 353.008804] ? graph_lock+0x170/0x170 [ 353.008828] ? find_held_lock+0x36/0x1c0 [ 353.008847] ? __lock_is_held+0xb5/0x140 [ 353.008880] ? ___might_sleep+0x1ed/0x300 [ 353.021672] ? arch_local_save_flags+0x40/0x40 [ 353.021689] ? ilookup5_nowait+0x84/0xc0 [ 353.021721] __should_failslab+0x124/0x180 [ 353.029581] should_failslab+0x9/0x14 [ 353.029598] kmem_cache_alloc+0x2be/0x730 [ 353.029613] ? find_inode.isra.19+0xc3/0x210 [ 353.029629] ? do_raw_spin_lock+0xc1/0x200 [ 353.029648] ? v9fs_blank_wstat+0x3a0/0x3a0 [ 353.029663] v9fs_alloc_inode+0x3d/0x150 [ 353.029677] alloc_inode+0x63/0x190 [ 353.029695] iget5_locked+0x124/0x1c0 [ 353.037893] ? v9fs_vfs_setattr+0xbb0/0xbb0 [ 353.054545] ? unixmode2p9mode+0x240/0x240 [ 353.054565] ? unixmode2p9mode+0x240/0x240 [ 353.054582] v9fs_inode_from_fid+0x172/0x350 [ 353.054601] ? do_raw_spin_unlock+0xa7/0x2f0 [ 353.054620] ? v9fs_vfs_getattr+0x270/0x270 [ 353.075795] v9fs_vfs_lookup+0x3f5/0x4a0 [ 353.075811] ? d_alloc+0x290/0x380 [ 353.075830] ? v9fs_vfs_create+0x130/0x130 [ 353.075843] ? lock_rename+0x236/0x290 22:26:28 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x1, @remote, 'syzkaller0\x00'}}, 0x80, &(0x7f0000001540)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000180)="3750fc21447c016580463ed0d428919de4809f0c1ab4e1d7bac17e00ad661da97449f28d5a507760dd305e443d6ce13cf04a637cef0d7235d8f308025a100ebacf53e176d6d804c514dbedf1b83b5ae092236025ae35e28d366d48c057a759a72fc3403a6a44f4cb5c51ce6b02a0d866f5ef001612d0df081f180439c20c0d9e5f1ad7f69a687ef1441d0bf4fcf9a8af133eaa6ce459f257e93f7f9696c0154ce0cb382465db08b4dbd0bebd5c9b1c9314df7a73e5d3", 0xb6}, {&(0x7f00000012c0)="84982569c0083ffd6f3d088a5c81704c268a6e877900679b26bec8fb8b2c4d333e55286a77893f3cc81f52b501460ebf5930465cf866fe3b52bb3f4071f8a67d70313cadd02a10f496e225183a54bb68fc7ad1c71e3077e0753e854dc8622a75a3f53f35156b6ef908c846342ffa3bf92743a0e07a4d36f55b4e0c45c9139a59655d799634808a995eafcd0f32b7bf3145abe0cc793b338a973a2c374c9a9c8d68d422e2c8d22686f3f3fdfe8568c5c60b4088e0f4256ed052ccfbaaa53bd77aa1058efa357a17c885400c3a22d77d9a2226cca7a02027c867cef36c950241ba8633e5af8231be6017316d51af9ec98cdae8ce5b73a9626a83d2a2b66a0ba9", 0xff}, {&(0x7f00000013c0)="d4f5a7737ec6b4a0b82c9c64233847bc9722af99417875f1083f31460e01919b4ca58c9fafdbc85450e049fc3e5a0f6cdd6606cc5cbd2cd53abeab9e6e4c1f10dd012dc5e6216d65ace38244bd00b0b3248b46e55c71092f9171d09d3c4608771d585d3d73340ba1a094d6c196ddab4f3c8e2ed5f38f10685f1446d4dc5ca9cac9801ec3ab2cddc9d0905c8287f2225c39f151673828a9f0a2", 0x99}, {&(0x7f0000001480)="f7f9a2f6acb80530728387b97fa839b21ae2cb38a94b7466b7a726ff0eb1e05c2286440cedeefd9d99b8c3e0274c21061908d8e542fbdb726a612c022f1aac57b071a32581dcb55bef7baadda5cb705a171da878ec210a62c4e1c13ce0a3333cd436d59a4076b41bd825abbd3ce6aa3668fad16f9b74cd0e696ec7cbb3880ba4833c3d807ea42f4df95b506b8c70bd238a2c0c", 0x93}], 0x5, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0xf8, 0x50}, 0x24000004) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x4c00000000000000}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="5500000020007fafb72d13b2a4a2809302000000030343026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000000005ae583de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) close(r1) finit_module(r1, &(0x7f00000000c0)='++%:wlan1\x00', 0x3) [ 353.075865] __lookup_hash+0x12e/0x190 [ 353.129228] do_renameat2+0x6c1/0x1180 [ 353.133179] ? user_path_create+0x40/0x40 [ 353.137352] ? __lock_is_held+0xb5/0x140 [ 353.141436] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.141455] ? check_preemption_disabled+0x48/0x200 [ 353.141483] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 353.152057] ? do_syscall_64+0x9a/0x820 [ 353.152075] ? do_syscall_64+0x9a/0x820 [ 353.152096] ? trace_hardirqs_on+0xbd/0x310 [ 353.152116] ? __ia32_sys_read+0xb0/0xb0 [ 353.173946] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.179344] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 353.184825] __x64_sys_rename+0x5e/0x80 [ 353.188820] do_syscall_64+0x1b9/0x820 [ 353.192724] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 353.193969] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 353.198110] ? syscall_return_slowpath+0x5e0/0x5e0 [ 353.198132] ? trace_hardirqs_on_caller+0x310/0x310 [ 353.198150] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 353.198177] ? recalc_sigpending_tsk+0x180/0x180 22:26:28 executing program 4 (fault-call:14 fault-nth:16): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:28 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:28 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x800000040085, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000001c0)={0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000240)={0x0, 0x0, 0x80000000}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000002c0)={0x0, 0x0, 0x4000000000}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)={r5, r4, 0x1}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000140)={r6, r7, 0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) r8 = geteuid() syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x7, &(0x7f0000000840)=[{&(0x7f0000000300)="fc02281aa93ed9d92e3c353fa07292d53b0439328edff237737b6218230f4bc89b3536487f347c729b1969c7db9fb3ca621cc64419fe289dd12dae446a76fb28d67b85e9121dcea08eb35bb3454a6eed688cb6da425c875fb90132d6ef09a89867655dda5aa200494550b832fd4b79f6b7400ec507c96b4683c7ba65fbc9154d00e17245ea3101d5610d62914ff8eb0e01c22765a126c3dc0374376157ecb325cb10a04f561a727de6c04bd4f59529b5d0f7b52cfab1b0fbded605ed2bb5f7f9b1ca7fec2efa61cb41e7b855dbfeed33e6a197ec046a719b9375b540", 0xdc, 0x6}, {&(0x7f0000000400)="0a7c0feaed730f031adf3b0b1cfd80243311a60bbca25421f6e3d33afeb87c465ebcbad19037375e71e3d5ab1e24b8d51cc503b2b4fda3ce48c9f85381868131403ebe4661348737b28526caeb8cf55af7dfb426a157eaf1df17e15c2324d43313b5da98b13e042bb128dc4b57e3cb2d32db461c1b891bc9570f7f9b174fe0ccc07bd5f89d3f61d140e2975b94cc0760ee1dadde3af17ecfb2ab70e3beaf5e866d49e2ec0efda40814235c10ff8f419d50", 0xb1, 0x9}, {&(0x7f00000004c0)="1275e1a1324c13018cd50d3b4f958c01d7b2a30c1868b24ab193d57970034a30543c88b6a460803574f54d76b9e8232af5890c8091e86762c5737289a82553b9324ed3f31582787645d557449276df28fb6825d340b5aa32c18241273c15b2b2c616530a2af90e5863d962bc8610e52c3d3b04a4046ea1ae58a92cca8313ebb58d0c25aeff704e9fa17d45e409dc2a3dd86543be77225974e9725aaa6fef635864046e20232360", 0xa7, 0x200}, {&(0x7f0000000580)="6e91f104b25888d9a975fd1d04c63e09b7a821b8475a0ce6d770b5204a57be5a6ac9a254d61c88125aa06d0c6c18a17af5502d5ff7ca024fdf229a207a535a46aa515e3a46da75a29f6c727fbe3bace9738b1f85e77a152ab06e9bb1a79eab2fec5ce4cf09be02ee44e95c6cf451c762f0e05a3b747dc68da454941fbec1bb7c2e9fb67e6ee56f463c3e6193f981a38825be9e5a81735bad4cf77547ebb688e4092a39e2f4d8a9dd176b98334707ae4080e81b4a9e5155fa89dcf5bf0dfc6086a75b3f08da21af3b5314895d9a5d16d257f233fe55cfee8ddc530bf70b6acc41918cfa5994a0", 0xe6, 0x2ce}, {&(0x7f0000000680)="4e51aeebcdedd364f1f95d471d7ef27e379f0f8b1da34894ba529213c9493b88c941cbf0bd2f9fe79564468d543c25afec8d533fdcff2f28acda22691dee260723621c23da584ec95019e7cf40f34f53ff1c1b19ebec24fa2f94483b7765443a5d8cae825f1b0e89587904", 0x6b, 0x1}, {&(0x7f0000000700)="d67769b2a74706f78ab63bc267023f6bf7fc1eea8ac36919e1faac56230844873bef087bddb4ab5233ce113d906e289e83742dcd6bdd901f2b6f919e8ab7ac82cf9deac211ab7a5d0f5f98675d9a5a", 0x4f, 0xffffffffffffffe0}, {&(0x7f0000000780)="e8c9d40885f323f433b3519b078d5f5565c2572db4c32f12e4695b572431a08a4346be870b5b6473c4e6bd31b4014fdcb41d5e24fe8f647f10db0c164d10fb50815858a78dd37325efa1772094e73320995dd031b8948baa39842cfbab6d1d0e1824ae7679c3cee6d05f5eddf791c22ec9a13ff2b3bc123b52af2a9fd1a6f1bf2c46482cff6c6621944534cd373babc356bea34bb4586e3c3e3d4c95d08087bb3d56094bb3cb", 0xa6, 0x100000001}], 0x20, &(0x7f0000000900)={[{@swalloc='swalloc'}, {@nodiscard='nodiscard'}, {@mtpt='mtpt'}, {@swidth={'swidth', 0x3d, 0x8000}}, {@gquota='gquota'}, {@logdev={'logdev', 0x3d, './file0'}}, {@grpquota='grpquota'}, {@logdev={'logdev', 0x3d, './file0'}}], [{@uid_eq={'uid', 0x3d, r8}}]}) [ 353.198192] ? kasan_check_write+0x14/0x20 [ 353.198213] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 353.198237] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.205717] netlink: 17 bytes leftover after parsing attributes in process `syz-executor1'. [ 353.210441] RIP: 0033:0x457579 [ 353.210458] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.210466] RSP: 002b:00007fb73dde1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 353.210484] RAX: ffffffffffffffda RBX: 00007fb73dde1c90 RCX: 0000000000457579 [ 353.210493] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 353.210501] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 353.210519] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73dde26d4 [ 353.210527] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:28 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x100) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) [ 353.407222] FS-Cache: Duplicate cookie detected [ 353.412213] FS-Cache: O-cookie c=000000005612fe5c [p=00000000845ed810 fl=222 nc=0 na=1] [ 353.420506] FS-Cache: O-cookie d=00000000b0f58035 n=00000000d4e0d0c1 [ 353.427031] FS-Cache: O-key=[10] '34323934393732343931' [ 353.432588] FS-Cache: N-cookie c=000000004c94bf30 [p=00000000845ed810 fl=2 nc=0 na=1] [ 353.440629] FS-Cache: N-cookie d=00000000b0f58035 n=00000000c670eaca [ 353.447134] FS-Cache: N-key=[10] '34323934393732343931' 22:26:28 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:28 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000000)={0x60, 0xffffffffffffffff, 0x8, {{0x80000001, 0x8001, 0x5, 0x9, 0xffffffffffffffb7, 0x9, 0x9, 0x8001}}}, 0x60) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x1c) 22:26:28 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000140)) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)={0xb, 'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1000, 0x8, 0x200, 0x7, 0xcb2b, 0x9, "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"}, 0x1118) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x141002, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f00000000c0)={0x1, 0x5, 0x20, 0x2}) close(r2) [ 353.461334] FAULT_INJECTION: forcing a failure. [ 353.461334] name failslab, interval 1, probability 0, space 0, times 0 [ 353.529200] CPU: 0 PID: 14231 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 353.536616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.545991] Call Trace: [ 353.548601] dump_stack+0x1c4/0x2b4 [ 353.552260] ? dump_stack_print_info.cold.2+0x52/0x52 [ 353.557492] should_fail.cold.4+0xa/0x17 [ 353.561583] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 353.566725] ? __lock_acquire+0x7ec/0x4ec0 [ 353.570979] ? graph_lock+0x170/0x170 [ 353.574801] ? graph_lock+0x170/0x170 [ 353.578627] ? find_held_lock+0x36/0x1c0 [ 353.582737] ? __lock_is_held+0xb5/0x140 [ 353.586837] ? ___might_sleep+0x1ed/0x300 [ 353.591000] ? arch_local_save_flags+0x40/0x40 [ 353.595592] ? kernel_text_address+0x79/0xf0 [ 353.600030] __should_failslab+0x124/0x180 [ 353.604284] should_failslab+0x9/0x14 [ 353.608101] kmem_cache_alloc+0x2be/0x730 [ 353.612281] ? print_usage_bug+0xc0/0xc0 [ 353.616455] fscache_alloc_cookie+0xcb/0x880 [ 353.620892] ? fscache_cookie_init_once+0x80/0x80 [ 353.625758] ? mark_held_locks+0xc7/0x130 [ 353.629993] ? ktime_get_coarse_real_ts64+0x288/0x3b0 [ 353.635202] ? ktime_get_coarse_real_ts64+0x288/0x3b0 [ 353.640410] ? lockdep_hardirqs_on+0x421/0x5c0 [ 353.645015] __fscache_acquire_cookie+0x230/0xb60 [ 353.649881] ? fscache_cookie_put+0x880/0x880 [ 353.654388] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 353.659414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.664973] ? set_nlink+0xaf/0x140 [ 353.668616] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 353.674175] ? v9fs_stat2inode+0x43f/0xa40 [ 353.678425] ? v9fs_evict_inode+0xc0/0xc0 [ 353.682595] ? current_time+0x131/0x1b0 [ 353.686582] ? timespec64_trunc+0x180/0x180 [ 353.690916] ? v9fs_blank_wstat+0x3a0/0x3a0 [ 353.695253] v9fs_cache_inode_get_cookie.part.7+0x17e/0x200 [ 353.700985] v9fs_cache_inode_get_cookie+0x56/0x70 [ 353.705935] v9fs_inode_from_fid+0x2c1/0x350 [ 353.710361] ? v9fs_vfs_getattr+0x270/0x270 [ 353.714710] v9fs_vfs_lookup+0x3f5/0x4a0 [ 353.718779] ? d_alloc+0x290/0x380 [ 353.722333] ? v9fs_vfs_create+0x130/0x130 [ 353.726595] ? lock_rename+0x236/0x290 [ 353.730512] __lookup_hash+0x12e/0x190 [ 353.734507] do_renameat2+0x6c1/0x1180 [ 353.738446] ? user_path_create+0x40/0x40 [ 353.742612] ? __lock_is_held+0xb5/0x140 [ 353.746704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.752262] ? check_preemption_disabled+0x48/0x200 [ 353.757330] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 353.762910] ? do_syscall_64+0x9a/0x820 [ 353.766898] ? do_syscall_64+0x9a/0x820 [ 353.770891] ? trace_hardirqs_on+0xbd/0x310 [ 353.775226] ? __ia32_sys_read+0xb0/0xb0 [ 353.779302] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.784696] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 353.790194] __x64_sys_rename+0x5e/0x80 [ 353.794200] do_syscall_64+0x1b9/0x820 [ 353.798096] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 353.803485] ? syscall_return_slowpath+0x5e0/0x5e0 [ 353.808435] ? trace_hardirqs_on_caller+0x310/0x310 [ 353.813470] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 353.818508] ? recalc_sigpending_tsk+0x180/0x180 [ 353.823281] ? kasan_check_write+0x14/0x20 [ 353.827547] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 353.832421] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.837635] RIP: 0033:0x457579 [ 353.840837] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.859871] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 353.867603] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 22:26:29 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_reqkey_keyring(0xe, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 353.874886] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 353.882170] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 353.889573] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 353.896850] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:29 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[], 0x0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:29 executing program 4 (fault-call:14 fault-nth:17): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:29 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:29 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x1f) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0xffffffffffffff7f) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20000, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x3, 0xe1, [], 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f00000000c0)=""/225}, &(0x7f00000001c0)=0x78) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000340)={0x1fffd, 0xffffffffffbffffd, 0xffffffffffd, 0x5, 0x4007ff}) [ 354.112330] FAULT_INJECTION: forcing a failure. [ 354.112330] name failslab, interval 1, probability 0, space 0, times 0 [ 354.123580] CPU: 1 PID: 14268 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 354.130955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.140326] Call Trace: [ 354.142950] dump_stack+0x1c4/0x2b4 [ 354.146619] ? dump_stack_print_info.cold.2+0x52/0x52 [ 354.151839] ? mark_held_locks+0x130/0x130 [ 354.156098] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 354.161928] should_fail.cold.4+0xa/0x17 [ 354.166014] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 354.171137] ? print_usage_bug+0xc0/0xc0 [ 354.175234] ? __lock_acquire+0x7ec/0x4ec0 [ 354.179498] ? print_usage_bug+0xc0/0xc0 [ 354.183587] ? __lock_acquire+0x7ec/0x4ec0 [ 354.187834] ? graph_lock+0x170/0x170 [ 354.191638] ? graph_lock+0x170/0x170 [ 354.195458] ? __lock_acquire+0x7ec/0x4ec0 [ 354.199712] ? mark_held_locks+0x130/0x130 [ 354.204163] ? mark_held_locks+0x130/0x130 [ 354.208424] __should_failslab+0x124/0x180 [ 354.212678] should_failslab+0x9/0x14 [ 354.216493] kmem_cache_alloc+0x47/0x730 [ 354.220728] ? print_usage_bug+0xc0/0xc0 [ 354.224803] ? print_usage_bug+0xc0/0xc0 [ 354.228881] ? trace_hardirqs_on+0x310/0x310 [ 354.233302] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 354.237904] radix_tree_node_alloc.constprop.18+0x1f7/0x370 [ 354.243659] radix_tree_extend+0x294/0x660 [ 354.247927] ? radix_tree_node_alloc.constprop.18+0x370/0x370 [ 354.253829] ? __lock_acquire+0x7ec/0x4ec0 [ 354.258087] ? print_usage_bug+0xc0/0xc0 [ 354.262173] ? check_noncircular+0x20/0x20 [ 354.266442] idr_get_free+0x83d/0xec0 [ 354.270280] ? ida_pre_get+0x130/0x130 [ 354.274189] ? check_preemption_disabled+0x48/0x200 [ 354.279240] ? print_usage_bug+0xc0/0xc0 [ 354.283322] ? __lock_acquire+0x7ec/0x4ec0 [ 354.287574] ? mark_held_locks+0x130/0x130 [ 354.291834] ? graph_lock+0x170/0x170 [ 354.295651] ? graph_lock+0x170/0x170 [ 354.299481] ? print_usage_bug+0xc0/0xc0 [ 354.303571] idr_alloc_u32+0x201/0x3f0 [ 354.307484] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 354.312353] ? p9_idpool_get+0x23/0x90 [ 354.316274] idr_alloc+0x111/0x1b0 [ 354.319836] ? idr_alloc_u32+0x3f0/0x3f0 [ 354.323918] ? do_raw_spin_lock+0xc1/0x200 [ 354.328197] p9_idpool_get+0x3d/0x90 [ 354.331942] p9_client_prepare_req.part.8+0xec/0xc30 [ 354.337068] ? delete_node+0x30e/0xd20 [ 354.340990] ? unwind_get_return_address+0x61/0xa0 [ 354.345947] ? p9_free_req.isra.7+0x140/0x140 [ 354.350460] ? idr_destroy+0x1c0/0x1c0 [ 354.354366] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.359916] ? replace_slot+0x151/0x520 [ 354.363922] p9_client_rpc+0x1c2/0x1480 [ 354.367909] ? radix_tree_descend+0x2e0/0x2e0 [ 354.372436] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 354.377821] ? find_held_lock+0x36/0x1c0 [ 354.381913] ? find_held_lock+0x36/0x1c0 [ 354.386004] ? mark_held_locks+0xc7/0x130 [ 354.390192] ? _raw_spin_unlock_irq+0x27/0x80 [ 354.394709] ? _raw_spin_unlock_irq+0x27/0x80 [ 354.399225] ? lockdep_hardirqs_on+0x421/0x5c0 [ 354.403835] ? trace_hardirqs_on+0xbd/0x310 [ 354.408179] ? kasan_check_read+0x11/0x20 [ 354.412343] ? p9_fid_create+0x1e2/0x2b0 [ 354.416419] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 354.421886] ? kasan_check_write+0x14/0x20 [ 354.426137] ? do_raw_spin_lock+0xc1/0x200 [ 354.430413] p9_client_walk+0x208/0xb30 [ 354.434405] ? __update_load_avg_se+0x311/0xb90 [ 354.439098] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 354.444741] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 354.449772] ? d_alloc+0x28b/0x380 [ 354.453326] ? lock_downgrade+0x86c/0x900 [ 354.457489] ? v9fs_fid_add+0x240/0x240 [ 354.461479] ? kasan_check_read+0x11/0x20 [ 354.465659] ? do_raw_spin_unlock+0xa7/0x2f0 [ 354.470082] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 354.474702] v9fs_vfs_lookup+0x1f7/0x4a0 [ 354.478776] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 354.483020] ? d_alloc+0x290/0x380 [ 354.486577] ? v9fs_vfs_create+0x130/0x130 [ 354.490817] ? lock_rename+0x236/0x290 [ 354.494732] __lookup_hash+0x12e/0x190 [ 354.498640] do_renameat2+0x76a/0x1180 [ 354.502582] ? user_path_create+0x40/0x40 [ 354.506767] ? __lock_is_held+0xb5/0x140 [ 354.510851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.516415] ? check_preemption_disabled+0x48/0x200 [ 354.521466] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 354.527029] ? do_syscall_64+0x9a/0x820 [ 354.531035] ? do_syscall_64+0x9a/0x820 [ 354.535054] ? trace_hardirqs_on+0xbd/0x310 [ 354.539388] ? __ia32_sys_read+0xb0/0xb0 [ 354.543472] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.548853] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 354.554344] __x64_sys_rename+0x5e/0x80 [ 354.558338] do_syscall_64+0x1b9/0x820 [ 354.562248] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 354.567632] ? syscall_return_slowpath+0x5e0/0x5e0 [ 354.572583] ? trace_hardirqs_on_caller+0x310/0x310 [ 354.577633] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 354.582663] ? recalc_sigpending_tsk+0x180/0x180 [ 354.587440] ? kasan_check_write+0x14/0x20 [ 354.591701] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 354.596595] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.601795] RIP: 0033:0x457579 [ 354.605008] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.624015] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 354.631754] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 354.639035] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 354.646323] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 354.653606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 22:26:29 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="560000007d010000004f0000000000000000000000000000000000000000000000000000000000000000000000000000000001002805757266646e6f05007266646e6f110076626f786e657431747275737465646c6fbb8ee9172a6aa3138fe52000554a1dd8cc44c7985051a6f7bb34b4d9b9ca81"], 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 354.660885] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:29 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = memfd_create(&(0x7f0000000080)='/dev/snd/timer\x00', 0x2) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:29 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[], 0x0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:29 executing program 4 (fault-call:14 fault-nth:18): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:29 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = dup(r1) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000080)=0x100) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:29 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0xffffffffffffffff, 0x102, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x4, 0x3, 0x8000, {0xa, 0x4e24, 0x1, @local, 0xc8a}}}, 0xfffffffffffffe87) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000040)={0x1fffd}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'erspan0\x00', 0x200}) [ 354.885450] FAULT_INJECTION: forcing a failure. [ 354.885450] name failslab, interval 1, probability 0, space 0, times 0 [ 354.900070] CPU: 1 PID: 14288 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 354.907482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.916855] Call Trace: [ 354.919475] dump_stack+0x1c4/0x2b4 [ 354.923171] ? dump_stack_print_info.cold.2+0x52/0x52 [ 354.928388] ? kernel_text_address+0x79/0xf0 [ 354.932832] ? __kernel_text_address+0xd/0x40 [ 354.937359] should_fail.cold.4+0xa/0x17 [ 354.941442] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 354.946566] ? __lock_acquire+0x7ec/0x4ec0 [ 354.950815] ? graph_lock+0x170/0x170 [ 354.954629] ? save_stack+0x43/0xd0 [ 354.958289] ? kasan_kmalloc+0xc7/0xe0 [ 354.962196] ? graph_lock+0x170/0x170 [ 354.966007] ? d_alloc+0x96/0x380 [ 354.969476] ? graph_lock+0x170/0x170 [ 354.973309] ? find_held_lock+0x36/0x1c0 [ 354.977387] ? __lock_is_held+0xb5/0x140 [ 354.981480] ? ___might_sleep+0x1ed/0x300 [ 354.985643] ? v9fs_fid_find+0x24b/0x2f0 [ 354.989731] ? arch_local_save_flags+0x40/0x40 [ 354.994332] ? lock_downgrade+0x900/0x900 [ 354.998521] __should_failslab+0x124/0x180 [ 355.002789] should_failslab+0x9/0x14 [ 355.006604] kmem_cache_alloc_trace+0x2d7/0x750 [ 355.011286] ? do_raw_spin_lock+0xc1/0x200 [ 355.015554] p9_fid_create+0x49/0x2b0 [ 355.019372] p9_client_walk+0x124/0xb30 [ 355.023370] ? __update_load_avg_se+0x311/0xb90 [ 355.028065] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 355.033710] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 355.038741] ? d_alloc+0x28b/0x380 [ 355.042296] ? lock_downgrade+0x86c/0x900 [ 355.046462] ? v9fs_fid_add+0x240/0x240 [ 355.050451] ? kasan_check_read+0x11/0x20 [ 355.054611] ? do_raw_spin_unlock+0xa7/0x2f0 [ 355.059036] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 355.063668] v9fs_vfs_lookup+0x1f7/0x4a0 [ 355.067743] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 355.071986] ? d_alloc+0x290/0x380 [ 355.075543] ? v9fs_vfs_create+0x130/0x130 [ 355.079805] ? lock_rename+0x236/0x290 [ 355.083748] __lookup_hash+0x12e/0x190 [ 355.087663] do_renameat2+0x76a/0x1180 [ 355.091591] ? user_path_create+0x40/0x40 [ 355.095753] ? __lock_is_held+0xb5/0x140 [ 355.099864] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.105455] ? check_preemption_disabled+0x48/0x200 [ 355.110522] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 355.116083] ? do_syscall_64+0x9a/0x820 [ 355.120071] ? do_syscall_64+0x9a/0x820 [ 355.124078] ? trace_hardirqs_on+0xbd/0x310 [ 355.128422] ? __ia32_sys_read+0xb0/0xb0 [ 355.132509] ? trace_hardirqs_on+0x310/0x310 [ 355.136940] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.142328] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 355.147807] __x64_sys_rename+0x5e/0x80 [ 355.151800] do_syscall_64+0x1b9/0x820 [ 355.155699] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 355.161082] ? syscall_return_slowpath+0x5e0/0x5e0 [ 355.166022] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.170888] ? trace_hardirqs_on_caller+0x310/0x310 [ 355.175932] ? prepare_exit_to_usermode+0x291/0x3b0 [ 355.180976] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.185866] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.191070] RIP: 0033:0x457579 [ 355.194274] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 355.213275] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 355.221011] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 355.228298] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 355.235584] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 355.242876] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 355.250764] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:30 executing program 1: r0 = socket$inet6(0xa, 0x4, 0x4000008000a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:30 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0x101}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x100000000}, &(0x7f0000000140)=0x8) close(r2) 22:26:30 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[], 0x0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:30 executing program 4 (fault-call:14 fault-nth:19): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:30 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) r2 = geteuid() lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:30 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = msgget(0x0, 0x420) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) r3 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r5 = getgid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)=0x0) r7 = getpgrp(0xffffffffffffffff) msgctl$IPC_SET(r1, 0x1, &(0x7f00000002c0)={{0xfffffffffffffff8, r2, r3, r4, r5, 0x84, 0xffff}, 0x5, 0x5, 0x8000, 0x7, 0x7, 0x80000000, r6, r7}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r9, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r9, 0x80487436, &(0x7f0000000040)={0x1fffd}) [ 355.861261] FAULT_INJECTION: forcing a failure. [ 355.861261] name failslab, interval 1, probability 0, space 0, times 0 [ 355.872526] CPU: 1 PID: 14305 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 355.879896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.889255] Call Trace: [ 355.891882] dump_stack+0x1c4/0x2b4 [ 355.895533] ? dump_stack_print_info.cold.2+0x52/0x52 [ 355.900737] ? mark_held_locks+0x130/0x130 [ 355.904980] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.910528] ? check_preemption_disabled+0x48/0x200 [ 355.915573] should_fail.cold.4+0xa/0x17 [ 355.919645] ? perf_trace_lock_acquire+0x15b/0x800 [ 355.924595] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 355.929710] ? print_usage_bug+0xc0/0xc0 [ 355.933783] ? __lock_acquire+0x7ec/0x4ec0 [ 355.938030] ? debug_smp_processor_id+0x1c/0x20 [ 355.942715] ? print_usage_bug+0xc0/0xc0 [ 355.946801] ? __lock_acquire+0x7ec/0x4ec0 [ 355.951068] ? graph_lock+0x170/0x170 [ 355.954879] ? graph_lock+0x170/0x170 [ 355.958694] ? __lock_acquire+0x7ec/0x4ec0 [ 355.962951] ? mark_held_locks+0x130/0x130 [ 355.967206] ? debug_smp_processor_id+0x1c/0x20 [ 355.971895] ? mark_held_locks+0x130/0x130 [ 355.976169] __should_failslab+0x124/0x180 [ 355.980425] should_failslab+0x9/0x14 [ 355.984235] kmem_cache_alloc+0x47/0x730 [ 355.988306] ? print_usage_bug+0xc0/0xc0 [ 355.992376] ? print_usage_bug+0xc0/0xc0 [ 355.996463] ? check_preemption_disabled+0x48/0x200 [ 356.001494] radix_tree_node_alloc.constprop.18+0x1f7/0x370 [ 356.007228] radix_tree_extend+0x294/0x660 [ 356.011480] ? radix_tree_node_alloc.constprop.18+0x370/0x370 [ 356.017377] ? __lock_acquire+0x7ec/0x4ec0 [ 356.021624] ? print_usage_bug+0xc0/0xc0 [ 356.025692] ? check_noncircular+0x20/0x20 [ 356.029949] idr_get_free+0x83d/0xec0 [ 356.033778] ? ida_pre_get+0x130/0x130 [ 356.037681] ? debug_smp_processor_id+0x1c/0x20 [ 356.042455] ? perf_trace_lock_acquire+0x15b/0x800 [ 356.047394] ? perf_trace_lock_acquire+0x15b/0x800 [ 356.052341] ? perf_trace_lock_acquire+0x15b/0x800 [ 356.057296] ? perf_trace_lock+0x7a0/0x7a0 [ 356.061547] ? perf_trace_lock+0x7a0/0x7a0 [ 356.065811] ? graph_lock+0x170/0x170 [ 356.069623] ? graph_lock+0x170/0x170 [ 356.073443] ? print_usage_bug+0xc0/0xc0 [ 356.077520] idr_alloc_u32+0x201/0x3f0 [ 356.081426] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 356.086285] ? p9_idpool_get+0x23/0x90 [ 356.090204] idr_alloc+0x111/0x1b0 [ 356.093762] ? idr_alloc_u32+0x3f0/0x3f0 [ 356.097837] ? do_raw_spin_lock+0xc1/0x200 [ 356.102097] p9_idpool_get+0x3d/0x90 [ 356.105822] p9_client_prepare_req.part.8+0xec/0xc30 [ 356.110934] ? delete_node+0x30e/0xd20 [ 356.114837] ? unwind_get_return_address+0x61/0xa0 [ 356.119909] ? p9_free_req.isra.7+0x140/0x140 [ 356.124415] ? idr_destroy+0x1c0/0x1c0 [ 356.128321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.133876] ? replace_slot+0x151/0x520 [ 356.137877] p9_client_rpc+0x1c2/0x1480 [ 356.141868] ? radix_tree_descend+0x2e0/0x2e0 [ 356.146399] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 356.151803] ? find_held_lock+0x36/0x1c0 [ 356.155898] ? find_held_lock+0x36/0x1c0 [ 356.159984] ? mark_held_locks+0xc7/0x130 [ 356.164153] ? _raw_spin_unlock_irq+0x27/0x80 [ 356.168759] ? _raw_spin_unlock_irq+0x27/0x80 [ 356.173271] ? lockdep_hardirqs_on+0x421/0x5c0 [ 356.177872] ? trace_hardirqs_on+0xbd/0x310 [ 356.182210] ? kasan_check_read+0x11/0x20 [ 356.186383] ? p9_fid_create+0x1e2/0x2b0 [ 356.190464] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 356.195936] ? kasan_check_write+0x14/0x20 [ 356.200197] ? do_raw_spin_lock+0xc1/0x200 [ 356.204461] p9_client_walk+0x208/0xb30 [ 356.208464] ? __update_load_avg_se+0x311/0xb90 [ 356.213178] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 356.218829] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 356.223878] ? d_alloc+0x28b/0x380 [ 356.227445] ? lock_downgrade+0x86c/0x900 [ 356.231658] ? v9fs_fid_add+0x240/0x240 [ 356.235734] ? kasan_check_read+0x11/0x20 [ 356.239893] ? do_raw_spin_unlock+0xa7/0x2f0 [ 356.244312] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 356.248919] v9fs_vfs_lookup+0x1f7/0x4a0 [ 356.252991] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 356.257230] ? d_alloc+0x290/0x380 [ 356.260781] ? v9fs_vfs_create+0x130/0x130 [ 356.265019] ? lock_rename+0x236/0x290 [ 356.269015] __lookup_hash+0x12e/0x190 [ 356.272917] do_renameat2+0x76a/0x1180 [ 356.276832] ? user_path_create+0x40/0x40 [ 356.280990] ? __lock_is_held+0xb5/0x140 [ 356.285074] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.290621] ? check_preemption_disabled+0x48/0x200 [ 356.295663] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 356.301212] ? do_syscall_64+0x9a/0x820 [ 356.305201] ? do_syscall_64+0x9a/0x820 [ 356.309204] ? trace_hardirqs_on+0xbd/0x310 [ 356.313537] ? __ia32_sys_read+0xb0/0xb0 [ 356.317623] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.323012] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 356.328487] __x64_sys_rename+0x5e/0x80 [ 356.332476] do_syscall_64+0x1b9/0x820 [ 356.336369] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 356.341745] ? syscall_return_slowpath+0x5e0/0x5e0 [ 356.346703] ? trace_hardirqs_on_caller+0x310/0x310 [ 356.351733] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 356.356756] ? recalc_sigpending_tsk+0x180/0x180 [ 356.361518] ? kasan_check_write+0x14/0x20 [ 356.365773] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 356.370630] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.375832] RIP: 0033:0x457579 [ 356.379037] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 356.397952] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 356.405682] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 22:26:31 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) syncfs(r1) close(r2) 22:26:31 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 356.412967] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 356.420241] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 356.427532] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 356.434820] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:31 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000340)) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:31 executing program 4 (fault-call:14 fault-nth:20): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:31 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f00000000c0)=""/13) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r2) 22:26:31 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffc) recvfrom(r0, &(0x7f00000000c0)=""/129, 0x81, 0x1, &(0x7f0000000180)=@generic={0xa, "39346d80833fb66bcff3b86643dd95d337acd7b47a501b52ee821998be3198f2e1d4b121835468f95ae185e15022139a8587919215f497404e917acf8a1c45e3ea4610acb9ab5a72e31d029d4559db2635c334013f34e9049a2667714dff4ba6674162a1d135748bd31fdd04fb512082ea1367a6e1c76f0a38e55d2cc783"}, 0x80) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="13ec07d5d5302fc93f9d18f434767cc2bb9d52066ab60ffea27e86dd304e6d302cbe346092f86c918c8c4b69237115dcfeff0ac642b485c3721a0827b9fddfb25799f04a3ac167fc45dd32dfbbb2f9d103ed0a2751d697586b0fe8bec746dc0906773f2d162c90546488ed750bf366a3ae7ff2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000002c0)=0x2c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r3, 0x20}, &(0x7f0000000340)=0x8) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:31 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:31 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:31 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000080)) [ 356.706334] FAULT_INJECTION: forcing a failure. [ 356.706334] name failslab, interval 1, probability 0, space 0, times 0 [ 356.717585] CPU: 1 PID: 14341 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 356.724965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.734335] Call Trace: [ 356.736946] dump_stack+0x1c4/0x2b4 [ 356.740602] ? dump_stack_print_info.cold.2+0x52/0x52 [ 356.745826] should_fail.cold.4+0xa/0x17 [ 356.749910] ? __lock_acquire+0x7ec/0x4ec0 22:26:31 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x58, "d0e520da152b1d1a57105a7930a3cb543616e6023effafd179db45953813b776bd5580bc9a5a365f4f1c8bc376f3ec68d4f772b04b05d0043c13fcd4f3ad84d3a13d7fbd4001335177ad04aa4de4c03750aea8a40a06fbec"}, &(0x7f0000000100)=0x60) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x1, 0x8009, 0x2, 0x5, r3}, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) [ 356.754171] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 356.759290] ? __update_load_avg_blocked_se+0x730/0x730 [ 356.764680] ? __update_load_avg_se+0xb90/0xb90 [ 356.769376] ? update_load_avg+0x387/0x2470 [ 356.773721] ? attach_entity_load_avg+0x860/0x860 [ 356.778584] ? __lock_acquire+0x7ec/0x4ec0 [ 356.782837] ? graph_lock+0x170/0x170 [ 356.786656] ? graph_lock+0x170/0x170 [ 356.790478] ? attach_entity_load_avg+0x860/0x860 [ 356.795348] __should_failslab+0x124/0x180 [ 356.799597] should_failslab+0x9/0x14 22:26:31 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) socketpair(0x3, 0x1, 0x4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) [ 356.803415] kmem_cache_alloc+0x47/0x730 [ 356.807493] ? print_usage_bug+0xc0/0xc0 [ 356.811562] ? __debug_object_init+0x57d/0x1290 [ 356.816252] radix_tree_node_alloc.constprop.18+0x1f7/0x370 [ 356.822480] radix_tree_extend+0x294/0x660 [ 356.826734] ? radix_tree_node_alloc.constprop.18+0x370/0x370 [ 356.832634] ? graph_lock+0x170/0x170 [ 356.836452] ? update_curr+0x4cf/0xbe0 [ 356.840367] idr_get_free+0x83d/0xec0 [ 356.844204] ? ida_pre_get+0x130/0x130 [ 356.848116] ? __lock_is_held+0xb5/0x140 [ 356.852202] ? __account_cfs_rq_runtime+0x790/0x790 [ 356.857241] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.862808] ? check_preemption_disabled+0x48/0x200 [ 356.867845] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.873491] ? __perf_event_task_sched_out+0x337/0x1ab0 [ 356.878876] ? select_task_rq_fair+0x34f0/0x34f0 [ 356.883688] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.889247] ? check_preemption_disabled+0x48/0x200 [ 356.894283] ? graph_lock+0x170/0x170 [ 356.898096] idr_alloc_u32+0x201/0x3f0 [ 356.901998] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 356.906854] ? p9_idpool_get+0x23/0x90 [ 356.910758] ? find_held_lock+0x36/0x1c0 [ 356.910790] idr_alloc+0x111/0x1b0 [ 356.910813] ? idr_alloc_u32+0x3f0/0x3f0 [ 356.918413] ? do_raw_spin_lock+0xc1/0x200 [ 356.918439] p9_idpool_get+0x3d/0x90 [ 356.918457] p9_client_prepare_req.part.8+0xec/0xc30 [ 356.918483] ? finish_task_switch+0x1f5/0x900 [ 356.940213] ? p9_free_req.isra.7+0x140/0x140 [ 356.944759] ? preempt_notifier_register+0x200/0x200 [ 356.949878] ? __switch_to_asm+0x34/0x70 [ 356.953955] ? __switch_to_asm+0x34/0x70 [ 356.958024] ? __switch_to_asm+0x40/0x70 [ 356.962095] ? __switch_to_asm+0x34/0x70 [ 356.966177] ? __switch_to_asm+0x40/0x70 [ 356.970246] ? __switch_to_asm+0x34/0x70 [ 356.974314] ? __switch_to_asm+0x40/0x70 [ 356.978383] ? __switch_to_asm+0x34/0x70 [ 356.982457] ? __switch_to_asm+0x34/0x70 [ 356.986532] ? __switch_to_asm+0x40/0x70 [ 356.990611] ? __switch_to_asm+0x34/0x70 [ 356.994704] p9_client_rpc+0x1c2/0x1480 [ 356.998690] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 357.004046] ? __sched_text_start+0x8/0x8 [ 357.008191] ? lockdep_hardirqs_on+0x421/0x5c0 [ 357.012760] ? retint_kernel+0x2d/0x2d [ 357.016636] ? trace_hardirqs_on_caller+0xc0/0x310 [ 357.021556] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 357.026304] ? trace_hardirqs_off+0x310/0x310 [ 357.030844] ? graph_lock+0x170/0x170 [ 357.034683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.040212] ? check_preemption_disabled+0x48/0x200 [ 357.045217] ? check_preemption_disabled+0x48/0x200 [ 357.050226] ? __lock_is_held+0xb5/0x140 [ 357.054281] p9_client_clunk+0x93/0x180 [ 357.058245] p9_client_walk+0x5d6/0xb30 [ 357.062222] ? __update_load_avg_se+0x311/0xb90 [ 357.066896] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 357.072514] ? v9fs_fid_add+0x230/0x240 [ 357.076474] ? d_alloc+0x28b/0x380 [ 357.080002] ? lock_downgrade+0x86c/0x900 [ 357.084142] ? v9fs_fid_add+0x240/0x240 [ 357.088111] ? kasan_check_read+0x11/0x20 [ 357.092251] ? do_raw_spin_unlock+0xa7/0x2f0 [ 357.096648] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 357.101283] v9fs_vfs_lookup+0x1f7/0x4a0 [ 357.105348] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 357.109567] ? d_alloc+0x290/0x380 [ 357.113107] ? v9fs_vfs_create+0x130/0x130 [ 357.117348] ? lock_rename+0x236/0x290 [ 357.121242] __lookup_hash+0x12e/0x190 [ 357.125124] do_renameat2+0x76a/0x1180 [ 357.129009] ? user_path_create+0x40/0x40 [ 357.133147] ? __lock_is_held+0xb5/0x140 [ 357.137206] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.142732] ? check_preemption_disabled+0x48/0x200 [ 357.147746] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 357.153274] ? do_syscall_64+0x9a/0x820 [ 357.157252] ? do_syscall_64+0x9a/0x820 [ 357.161219] ? trace_hardirqs_on+0xbd/0x310 [ 357.165529] ? __ia32_sys_read+0xb0/0xb0 [ 357.169580] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.174930] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 357.180374] __x64_sys_rename+0x5e/0x80 [ 357.184339] do_syscall_64+0x1b9/0x820 [ 357.188214] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 357.193573] ? syscall_return_slowpath+0x5e0/0x5e0 [ 357.198506] ? trace_hardirqs_on_caller+0x310/0x310 [ 357.203533] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 357.208548] ? recalc_sigpending_tsk+0x180/0x180 [ 357.213294] ? kasan_check_write+0x14/0x20 [ 357.217530] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 357.222367] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.227540] RIP: 0033:0x457579 [ 357.230725] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 357.249618] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 22:26:32 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xffffffff, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000080)={0x1, 0x4, 0xffffffff, 0x200}) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000140)={r4, 0x9, 0x30, 0xffff, 0xffffffffffff3faa}, &(0x7f0000000180)=0x18) ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:32 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)='gid_map\x00', 0xffffffffffffffff}, 0x30) r2 = syz_open_procfs(r1, &(0x7f0000000140)="6769645fa8672fee6b0721a2090055ccd5e097d0608317") ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0x6, 0x2, 0x6b}) r3 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) close(r3) 22:26:32 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) syncfs(r0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000001040)={'mangle\x00', 0x1000, "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"}, &(0x7f0000000140)=0x1024) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) socketpair$inet(0x2, 0x8000a, 0x101, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000000c0)={0x80000001}, 0x4) 22:26:32 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x214, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x1, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000300)={[{0x10000, 0xe1, 0x4, 0x42f0, 0x8, 0x2, 0x7c1, 0x8, 0x4, 0x100000000, 0x95, 0x508000000000, 0xffffffffffffff92}, {0x6815, 0x40, 0x81, 0x5, 0x80000000, 0x4, 0x9, 0x80, 0x1ff, 0x8, 0x4, 0xee, 0x100}, {0x401, 0x100000001, 0x313, 0x5, 0x5, 0x8, 0x9, 0x9, 0x3, 0x2e, 0x8, 0x1, 0x1}], 0x8}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 357.257318] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 357.264581] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 357.271840] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 357.279098] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 357.286383] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:32 executing program 4 (fault-call:14 fault-nth:21): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:32 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:32 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x400, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000140)=""/139) ioctl(r0, 0x2000000000, &(0x7f00000002c0)="153f62341375abaa69f10c80171b480fc1077b798da967992bd2064df070530829f8d0de327c879df3328d3282c2fcf9e86e54ebaaedd934284133fdcfbcb61056a51484bb4d8dc6ba4a51da22b7f5a477f84009cfe48d172fa23ac1570493696b5e66e30729e879672aa8c1a95ebedce8bba9911f4fe52826ab01704432de3ebea33feeb0ddf34922302cef80cfa4f1e29e06afbac6de75ef19586da7c6b05804d895d650862fb342c13ec84455888d654553fac02e70505106fe638cca55d8299fb5f5") ioctl$sock_ifreq(r0, 0x8976, &(0x7f00000000c0)={"000005000000000000000000000200", @ifru_names='veth1_to_bond\x00'}) r2 = dup3(r0, r0, 0x80000) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000080)={0x6, @local}) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) close(r3) 22:26:32 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) r2 = socket$packet(0x11, 0x2, 0x300) connect(r2, &(0x7f0000000600)=@nfc_llcp={0x27, 0x0, 0x1, 0x6, 0x27, 0x7fffffff, "cf9296d7a67744c4447ac4ead41e943dc337ff70804701f58582957b5d26f1cb7bf4a13544ffd05b95796e00dc374d91a9878fdfe1d9f64d943fdf0f72ccf2", 0x3f}, 0x80) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:32 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) close(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80180, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x420) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100)=0x8, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="5286d393beae30df48d1199daec8a7355c64db098381c294942b51bc3421d605beb341e477c517dfa9d277ac3d4e572dfa8e646f7e6b64a09927986abfe8ca000000000000f5c05424ad2ada3f54136d51f7471663fb99cd143a7d761fbdda0d74b841995893ee"]) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r3) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x1db3) 22:26:32 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000"], 0xb) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:32 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) socketpair(0x0, 0x5, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r3, &(0x7f0000000080)="170aa59ec84af8c57f24fcf0dc8b4807a2f6d3bd0df8ba98484b969dffab16c62e", 0x21, 0x6, &(0x7f0000000100)={r4, r5+30000000}) 22:26:32 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x40000003}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) [ 357.581651] FAULT_INJECTION: forcing a failure. [ 357.581651] name failslab, interval 1, probability 0, space 0, times 0 [ 357.636109] CPU: 0 PID: 14390 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 357.643525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.652901] Call Trace: [ 357.655532] dump_stack+0x1c4/0x2b4 [ 357.659202] ? dump_stack_print_info.cold.2+0x52/0x52 [ 357.664408] ? delete_node+0x30e/0xd20 [ 357.668319] should_fail.cold.4+0xa/0x17 [ 357.672396] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 357.677517] ? replace_slot+0x151/0x520 [ 357.681520] ? graph_lock+0x170/0x170 [ 357.685351] ? graph_lock+0x170/0x170 [ 357.689262] ? graph_lock+0x170/0x170 [ 357.693073] ? print_usage_bug+0xc0/0xc0 [ 357.697152] ? find_held_lock+0x36/0x1c0 [ 357.701243] ? __lock_is_held+0xb5/0x140 [ 357.705334] ? ___might_sleep+0x1ed/0x300 [ 357.709498] ? arch_local_save_flags+0x40/0x40 [ 357.714109] __should_failslab+0x124/0x180 [ 357.718358] should_failslab+0x9/0x14 [ 357.722195] kmem_cache_alloc_trace+0x2d7/0x750 [ 357.726884] ? _raw_spin_unlock+0x2c/0x50 [ 357.731052] p9_fid_create+0x49/0x2b0 22:26:32 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) io_setup(0x1, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f0000000180)='security/\x00', 0x2) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x20000, 0x100) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000008c0)=0x1, &(0x7f0000000900)=0x4) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/self/net/pfkey\x00', 0x10002, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000800)=0x60, 0x4) io_submit(r2, 0x7, &(0x7f0000000880)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfffe00, r1, &(0x7f0000000140)="8fa5fb69d73b01c715fc", 0xa, 0x5, 0x0, 0x1, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x5, r1, &(0x7f00000002c0)="adf7cb887fd6200658a68126587254b3ba03ee8cfcf55922dcd0c60c43c9a081f4ee068ce246f2ef5e275be2d2c347f6ce5477712c654e42d7ce7e97f4aaf7e36c6c3365b7d8d3cb5fd4b9e8f4115720d8ef98d372e3cd02e7412e37bcf2b2644f09c5c0cc08ee360fef73ef329cca25aabed4de129ce40f07f1b53d76fa699bf47051562dff37378aa15573604759a1bf1337e577bdcb46a69ce4968482f1760837cb4633310591a70eb0ff7ae02549830efdeb4196a5d782307fb6b0cc5b5a22f10b7e53bb", 0xc6, 0x5, 0x0, 0x2, r4}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f00000003c0)="aa56a4b1748c8c3cfe36da5450c3d0779aeafdd096ec7d30d460e82b1cc7a1163332268847614245778beae0648ea50f86274a7209f779046d80e2637c164dc7c9a3801f111c5f76d17b1ebacfa384ba34b4b0e848171741b7fcc5c8c23263a2cfa22457c1935fedc4629a6ae637b3186ec7c1bcf1fe64f1c3f9a56d8a4627cfcf3605550d8451450eab953fdddccf45306eaab7419623deaa2da8e4936ace4227d847d0e570bee6655d2a66e451bfbf0997e18ee2730740b62011b26f", 0xbd, 0x401, 0x0, 0xe91d56f45863191, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f0000000500)="d2af7020d71df48623031c25c6195138e7b9742235991c0fd7e237cc7d5e117855c3517521ec1aa2a68c06e0dd1eb24d843e6cf5c23efa58b35bd7056380621e8c62329a4ad2fc818f9aef89a3cea5662d46a709f40281a3805502aef2e2dca982a97878699fd811acad45", 0x6b, 0x8000, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x1ff, r0, &(0x7f00000005c0)="0cbef0ee1a2f46b11ef5b286a262e468049f9643481ead05453315377786d0cc2e6d8b517d7b888cf132229ed549e2ada510a66f3b7adc532b5399c3e2", 0x3d, 0xffffffff, 0x0, 0x1, r0}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0x9, r1, &(0x7f0000000640)="be43f2f88b9a28ecf0aa4a650c84e64f6790776e87cdb910c053c0427eab04f2ad40aec2ffaea75861bf49f9834a76c6862d891e5e773f69dc3501a65b6529428595dcbe88f55707c8fbcaa2206c2b", 0x4f, 0x2, 0x0, 0x1, r6}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0xf, 0x2, r1, &(0x7f0000000740)="1c8aecbf8a7c17e8645057d25cbe3040fcb414c83613f57dc3213ad2a712a24300b47bb1fd2ffbf7f8facc3918a08aade410a90a7d559610a173439c5cd198cf714fa8e517c4340963f711a84b1f9ed71602b8b0ac32a720b554657e24d7c052cf061b0b8b00e21d74999592c944eef8ea6008ad857d4835fd31cfdaca188eed03aa19f2d08ce6557f71d4052b57d9d5bb7e", 0x92, 0x8, 0x0, 0x1}]) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r1) [ 357.734873] p9_client_walk+0x124/0xb30 [ 357.738875] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 357.744522] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 357.749581] ? graph_lock+0x170/0x170 [ 357.753405] ? graph_lock+0x170/0x170 [ 357.757233] ? v9fs_fid_add+0x240/0x240 [ 357.761226] ? __lock_is_held+0xb5/0x140 [ 357.765309] ? lock_acquire+0x1ed/0x520 [ 357.769907] ? lock_two_nondirectories+0xdd/0x120 [ 357.774763] v9fs_vfs_rename+0x2ef/0xd30 [ 357.778816] ? v9fs_vfs_rename+0x2ef/0xd30 [ 357.783093] ? lockref_get+0x42/0x50 [ 357.786866] ? v9fs_vfs_rmdir+0x30/0x30 [ 357.790831] ? down_write_nested+0x8e/0x130 [ 357.795175] ? lock_two_nondirectories+0xdd/0x120 [ 357.800042] ? _down_write_nest_lock+0x130/0x130 [ 357.804795] ? kasan_check_write+0x14/0x20 [ 357.809031] ? do_raw_spin_lock+0xc1/0x200 [ 357.813263] vfs_rename+0x7fc/0x1a90 [ 357.816972] ? lookup_one_len+0x220/0x220 [ 357.821113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.826656] ? security_path_rename+0x210/0x300 [ 357.831318] do_renameat2+0xea5/0x1180 [ 357.835209] ? user_path_create+0x40/0x40 [ 357.839401] ? __lock_is_held+0xb5/0x140 [ 357.843457] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.848987] ? check_preemption_disabled+0x48/0x200 [ 357.854012] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 357.859592] ? do_syscall_64+0x9a/0x820 [ 357.863567] ? do_syscall_64+0x9a/0x820 [ 357.867533] ? trace_hardirqs_on+0xbd/0x310 [ 357.871845] ? __ia32_sys_read+0xb0/0xb0 [ 357.875895] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.881250] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 357.886744] __x64_sys_rename+0x5e/0x80 [ 357.890713] do_syscall_64+0x1b9/0x820 [ 357.894588] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 357.899943] ? syscall_return_slowpath+0x5e0/0x5e0 [ 357.904876] ? trace_hardirqs_on_caller+0x310/0x310 [ 357.909897] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 357.914904] ? recalc_sigpending_tsk+0x180/0x180 [ 357.919656] ? kasan_check_write+0x14/0x20 [ 357.923927] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 357.928784] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.933964] RIP: 0033:0x457579 [ 357.937146] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 357.956056] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 357.963771] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 357.971031] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 357.978287] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 22:26:33 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) [ 357.985552] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 357.992811] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:33 executing program 4 (fault-call:14 fault-nth:22): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:33 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x2000000000008) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x8001, &(0x7f0000ffd000/0x2000)=nil, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x5) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0xffffffffffffff81}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x80000000}, &(0x7f0000000100)=0x8) r3 = dup3(r0, r0, 0x80000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x800, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="0d57ff8e7cc500030000771e6233c2aced9a4e0cafc1bb9e73a151b8a63398dca8b0d27c2f2f98f71b330fa5e5a0410cde08d70b0441963ef2ce4d535e6e8efb23797779168b32e7cb99c2d2c96c400000000000000093a661b5df08202bc6fb1e721d36a49a908e446028adc7d74ec7978bf5d7adae8d446bb344ccb458564b531d65e6722e00b12af6eec2d016fe8da9324931c45f5ac64af50ff9a530fdb01a58bd76f52b7a1e0a98ec587d7582607296"], &(0x7f0000000180)=0xe) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r4 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x2000) write$FUSE_STATFS(r4, &(0x7f00000002c0)={0x60, 0x0, 0x8, {{0x40, 0x4, 0x401, 0x321, 0x100, 0x1000, 0x85e, 0x1}}}, 0x60) close(r1) 22:26:33 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 22:26:33 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000"], 0xb) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:33 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:33 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1a802, 0x0) write$P9_RLERROR(r3, &(0x7f0000000080)={0xe, 0x7, 0x1, {0x5, 'proc-'}}, 0xe) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) fcntl$setstatus(r0, 0x4, 0x40800) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:33 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000140)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000240)={0x1, 0x0, [{0xb, 0x5, 0xfff, 0x9, 0x773e}]}) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0xffff, 0x1}, {0x100000000}]}, 0x14, 0x1) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r3) [ 358.230179] FAULT_INJECTION: forcing a failure. [ 358.230179] name failslab, interval 1, probability 0, space 0, times 0 [ 358.276920] CPU: 0 PID: 14425 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 358.284330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.293704] Call Trace: [ 358.293746] dump_stack+0x1c4/0x2b4 [ 358.293769] ? dump_stack_print_info.cold.2+0x52/0x52 [ 358.293800] should_fail.cold.4+0xa/0x17 [ 358.293833] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 358.293865] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 358.305248] ? graph_lock+0x170/0x170 [ 358.305266] ? print_usage_bug+0xc0/0xc0 [ 358.305282] ? graph_lock+0x170/0x170 [ 358.305301] ? graph_lock+0x170/0x170 [ 358.323533] ? find_held_lock+0x36/0x1c0 [ 358.323564] ? __lock_is_held+0xb5/0x140 [ 358.323591] ? ___might_sleep+0x1ed/0x300 [ 358.331656] ? arch_local_save_flags+0x40/0x40 [ 358.331687] __should_failslab+0x124/0x180 [ 358.331716] should_failslab+0x9/0x14 [ 358.360383] kmem_cache_alloc_trace+0x2d7/0x750 [ 358.365072] ? _raw_spin_unlock+0x2c/0x50 [ 358.369256] p9_fid_create+0x49/0x2b0 [ 358.373085] p9_client_walk+0x124/0xb30 22:26:33 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000"], 0xb) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 358.377075] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.382632] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 358.388266] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 358.393291] ? graph_lock+0x170/0x170 [ 358.397103] ? graph_lock+0x170/0x170 [ 358.400918] ? v9fs_fid_add+0x240/0x240 [ 358.404908] ? __lock_is_held+0xb5/0x140 [ 358.408991] ? lock_acquire+0x1ed/0x520 [ 358.413077] ? lock_two_nondirectories+0xdd/0x120 [ 358.417946] v9fs_vfs_rename+0x239/0xd30 [ 358.422016] ? v9fs_vfs_rename+0x239/0xd30 [ 358.426263] ? lockref_get+0x42/0x50 [ 358.430010] ? v9fs_vfs_rmdir+0x30/0x30 [ 358.433999] ? down_write_nested+0x8e/0x130 [ 358.438332] ? lock_two_nondirectories+0xdd/0x120 [ 358.443195] ? _down_write_nest_lock+0x130/0x130 [ 358.448001] ? kasan_check_write+0x14/0x20 [ 358.452258] ? do_raw_spin_lock+0xc1/0x200 [ 358.456531] vfs_rename+0x7fc/0x1a90 [ 358.460277] ? lookup_one_len+0x220/0x220 [ 358.464448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.470007] ? security_path_rename+0x210/0x300 [ 358.474693] do_renameat2+0xea5/0x1180 [ 358.478619] ? user_path_create+0x40/0x40 [ 358.482792] ? __lock_is_held+0xb5/0x140 [ 358.486870] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.492422] ? check_preemption_disabled+0x48/0x200 [ 358.497465] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 358.503030] ? do_syscall_64+0x9a/0x820 [ 358.507028] ? do_syscall_64+0x9a/0x820 [ 358.511019] ? trace_hardirqs_on+0xbd/0x310 [ 358.515351] ? __ia32_sys_read+0xb0/0xb0 [ 358.519421] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.524805] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 358.530287] __x64_sys_rename+0x5e/0x80 [ 358.534277] do_syscall_64+0x1b9/0x820 [ 358.538187] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 358.543571] ? syscall_return_slowpath+0x5e0/0x5e0 [ 358.548516] ? trace_hardirqs_on_caller+0x310/0x310 [ 358.553556] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 358.558586] ? recalc_sigpending_tsk+0x180/0x180 [ 358.563358] ? kasan_check_write+0x14/0x20 [ 358.567616] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 358.572488] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.577686] RIP: 0033:0x457579 [ 358.580891] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 358.599806] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 358.607537] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 358.614823] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 22:26:33 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000780)='/dev/snd/timer\x00', 0x0, 0x20000) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000640)={0x1, {r5, r6+10000000}, 0x0, 0x5}) socketpair(0x2, 0x80000, 0x5a64, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000680)=[@in6={0xa, 0x4e22, 0x2, @loopback, 0x6}, @in6={0xa, 0x4e21, 0x3, @ipv4={[], [], @remote}, 0x5492}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x275c}], 0x54) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80002045}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r7}, {0x8, 0x1, r8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x60}}, 0x48000) accept$inet6(r0, 0x0, &(0x7f00000002c0)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000500)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r9 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x80000) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$P9_ROPEN(r9, &(0x7f0000000240)={0x18, 0x71, 0x1, {{0x80, 0x4, 0x4}, 0x8}}, 0x18) getdents64(r9, &(0x7f00000000c0)=""/75, 0x4b) sendto$inet6(r0, &(0x7f00000001c0)="b5c354dd99ac8ca9969bbee7353abd19b1b917c048177b754aacfa33cc09983e3b6605e7580e110dad4c", 0x2a, 0x1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @empty, 0x5}, 0x1c) close(r2) [ 358.622102] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 358.629390] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 358.636675] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:33 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="2a002000290100000000000000002d00000000000000000000000000000000000007002e2f66696c65302db36b1de8850af87159a4fe176574d10a6368afde6bafce738f40200769ce560d489d0a8b620367f46165d77ddbe54a6034786a7465abbde2488241cbd0bad1b047f0d0eeabe796ecf689a98b3df0d059df29d2cdb9564c568abf8683170420d1dbbb8e"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:33 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) fcntl$dupfd(r1, 0x406, r0) 22:26:33 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40c002, 0x80) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f00000000c0)={0x4, 0x0, 0x9, 0x5, 0x3}) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x0, 0x1, 0x20000000000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r3) 22:26:33 executing program 4 (fault-call:14 fault-nth:23): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:33 executing program 1: r0 = socket$inet6(0xa, 0x7, 0x804000000000009) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f00000000c0)='\x00', 0x1, 0x1) close(r1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 22:26:33 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000000000000000"], 0x11) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:34 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ftruncate(r0, 0xc2da) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x204000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) [ 358.927515] FAULT_INJECTION: forcing a failure. [ 358.927515] name failslab, interval 1, probability 0, space 0, times 0 [ 358.956556] CPU: 1 PID: 14477 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 358.963972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.973359] Call Trace: [ 358.975973] dump_stack+0x1c4/0x2b4 [ 358.979622] ? dump_stack_print_info.cold.2+0x52/0x52 [ 358.979641] ? delete_node+0x30e/0xd20 [ 358.979673] should_fail.cold.4+0xa/0x17 [ 358.979700] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 358.997926] ? replace_slot+0x151/0x520 [ 359.001916] ? graph_lock+0x170/0x170 [ 359.001936] ? graph_lock+0x170/0x170 [ 359.001953] ? graph_lock+0x170/0x170 [ 359.013351] ? print_usage_bug+0xc0/0xc0 [ 359.017426] ? find_held_lock+0x36/0x1c0 [ 359.017452] ? __lock_is_held+0xb5/0x140 [ 359.025587] ? ___might_sleep+0x1ed/0x300 [ 359.029930] ? arch_local_save_flags+0x40/0x40 [ 359.034555] __should_failslab+0x124/0x180 [ 359.038805] should_failslab+0x9/0x14 [ 359.042626] kmem_cache_alloc_trace+0x2d7/0x750 [ 359.047316] ? _raw_spin_unlock+0x2c/0x50 [ 359.051482] p9_fid_create+0x49/0x2b0 [ 359.051502] p9_client_walk+0x124/0xb30 [ 359.051526] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 359.064913] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 359.064931] ? graph_lock+0x170/0x170 [ 359.064948] ? graph_lock+0x170/0x170 [ 359.077577] ? v9fs_fid_add+0x240/0x240 [ 359.081573] ? __lock_is_held+0xb5/0x140 [ 359.085654] ? lock_acquire+0x1ed/0x520 [ 359.089660] ? lock_two_nondirectories+0xdd/0x120 [ 359.094535] v9fs_vfs_rename+0x2ef/0xd30 [ 359.094551] ? v9fs_vfs_rename+0x2ef/0xd30 [ 359.094570] ? lockref_get+0x42/0x50 [ 359.106579] ? v9fs_vfs_rmdir+0x30/0x30 [ 359.110567] ? down_write_nested+0x8e/0x130 [ 359.114896] ? lock_two_nondirectories+0xdd/0x120 [ 359.119753] ? _down_write_nest_lock+0x130/0x130 [ 359.124522] ? kasan_check_write+0x14/0x20 [ 359.128768] ? do_raw_spin_lock+0xc1/0x200 [ 359.133026] vfs_rename+0x7fc/0x1a90 [ 359.136762] ? lookup_one_len+0x220/0x220 [ 359.140928] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.146485] ? security_path_rename+0x210/0x300 [ 359.151182] do_renameat2+0xea5/0x1180 [ 359.155104] ? user_path_create+0x40/0x40 [ 359.159268] ? __lock_is_held+0xb5/0x140 [ 359.163358] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.168920] ? check_preemption_disabled+0x48/0x200 [ 359.173966] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 359.179516] ? do_syscall_64+0x9a/0x820 [ 359.183505] ? do_syscall_64+0x9a/0x820 [ 359.187523] ? trace_hardirqs_on+0xbd/0x310 [ 359.191856] ? __ia32_sys_read+0xb0/0xb0 [ 359.195933] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.201309] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 359.206778] __x64_sys_rename+0x5e/0x80 [ 359.210765] do_syscall_64+0x1b9/0x820 [ 359.214660] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 359.220033] ? syscall_return_slowpath+0x5e0/0x5e0 [ 359.224987] ? trace_hardirqs_on_caller+0x310/0x310 [ 359.230021] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 359.235057] ? recalc_sigpending_tsk+0x180/0x180 [ 359.239839] ? kasan_check_write+0x14/0x20 [ 359.244098] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 359.248967] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.254175] RIP: 0033:0x457579 [ 359.257387] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:26:34 executing program 2: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3, 0x444800) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000900)=""/135, 0x1000000, 0x1000, 0x1000}, 0x18) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:34 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) getsockname(r0, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x80) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r1, 0x80487436, &(0x7f0000000040)={0x5, 0x6, 0x0, 0xffffffffffffffff, 0x3fd}) 22:26:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000080003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:34 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) r2 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r3) 22:26:34 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000000000000000"], 0x11) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 359.276299] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 359.284036] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 359.291323] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 359.298660] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 359.305935] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 359.313210] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:34 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) signalfd(0xffffffffffffffff, &(0x7f0000000080)={0x9cbf}, 0x8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="0f200066b852008ee866ba430066ed0f585900c4c215a6eb0f0f5906b60f01f1b88a28f2d70f23c80f21f8350c0050000f23f80f01c966baf80cb876dba084ef66bafc0cb001ee", 0x47}], 0x1, 0x10, &(0x7f0000000240)=[@dstype0={0x6, 0xf}], 0x1) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4) close(r0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x8, 0x202001) 22:26:34 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9, 0x2000) write$input_event(r2, &(0x7f0000000340)={{0x77359400}, 0x3, 0x0, 0x1}, 0x18) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:34 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000100)=0x4bbc, 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0xfffffffffffffffe, &(0x7f00000000c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 22:26:34 executing program 4 (fault-call:14 fault-nth:24): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:34 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000000000000000"], 0x11) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:34 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000080)=""/178, &(0x7f0000000140)=0xb2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:34 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7f, 0x1) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000280)=""/236) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9014040}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00002875d829f800", @ANYRES16=r2, @ANYBLOB="000328bd7000fedbdf2503000000080002000a00000008000300bfb70000080002e619000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r3 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000380)={0x7660}, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VT_RELDISP(r1, 0x5605) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r3, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r5, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:34 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000080)=0x101) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:34 executing program 2: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @multicast1}, &(0x7f0000000780)=0x10) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000007c0)={0x6, [0x70, 0x6, 0x7, 0x3, 0x7, 0x7e9]}, &(0x7f0000000900)=0x10) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x1122}}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r2, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r2, &(0x7f0000000400)={0xb, 0x77, 0x1, 0xfffffffffffffffd}, 0xfcc6) write$P9_RGETATTR(r2, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r2, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r2, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:34 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000000000000000000000"], 0x14) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:34 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x48, &(0x7f0000000080)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e24, 0x10000, @ipv4={[], [], @remote}, 0x99c}, @in6={0xa, 0x4e21, 0x0, @loopback, 0xffffffff}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r2, 0x2}, &(0x7f00000001c0)=0x8) set_tid_address(&(0x7f0000000300)) r3 = creat(&(0x7f0000000200)='./file0\x00', 0xe0) write$apparmor_exec(r3, &(0x7f0000000240)={'stack ', '/dev/snd/timer\x00'}, 0x15) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) [ 359.713624] FAULT_INJECTION: forcing a failure. [ 359.713624] name failslab, interval 1, probability 0, space 0, times 0 [ 359.728667] CPU: 0 PID: 14535 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 359.736063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.745433] Call Trace: [ 359.748044] dump_stack+0x1c4/0x2b4 [ 359.751703] ? dump_stack_print_info.cold.2+0x52/0x52 [ 359.756928] should_fail.cold.4+0xa/0x17 [ 359.761014] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 359.766145] ? graph_lock+0x170/0x170 [ 359.769964] ? perf_trace_lock+0x7a0/0x7a0 [ 359.774216] ? graph_lock+0x170/0x170 [ 359.778027] ? graph_lock+0x170/0x170 [ 359.778052] ? find_held_lock+0x36/0x1c0 [ 359.778074] ? __lock_is_held+0xb5/0x140 [ 359.778104] ? ___might_sleep+0x1ed/0x300 [ 359.778122] ? arch_local_save_flags+0x40/0x40 [ 359.778150] __should_failslab+0x124/0x180 [ 359.798778] should_failslab+0x9/0x14 [ 359.798798] kmem_cache_alloc_trace+0x2d7/0x750 22:26:34 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0xffffffffffffffff, 0x1, 0x4, 0x3, 0xa212}, 0x8000, 0xffffffff, 0x2}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x19d8ef6c) close(r2) [ 359.798820] ? _raw_spin_unlock+0x2c/0x50 [ 359.798843] p9_fid_create+0x49/0x2b0 [ 359.798862] p9_client_walk+0x124/0xb30 [ 359.798888] ? p9_client_zc_rpc.constprop.10+0x1550/0x1550 [ 359.811580] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 359.811598] ? graph_lock+0x170/0x170 [ 359.811614] ? graph_lock+0x170/0x170 [ 359.811634] ? v9fs_fid_add+0x240/0x240 [ 359.811652] ? __lock_is_held+0xb5/0x140 [ 359.811672] ? lock_acquire+0x1ed/0x520 [ 359.811688] ? lock_two_nondirectories+0xdd/0x120 [ 359.811718] v9fs_vfs_rename+0x2ef/0xd30 22:26:34 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) splice(r0, &(0x7f0000000080), r0, &(0x7f00000000c0)=0x2d, 0x9, 0x1) close(r1) 22:26:34 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x400000) bind$can_raw(r0, &(0x7f0000000140), 0x10) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+', 0x4107a999}, 0x28, 0x1) close(0xffffffffffffffff) [ 359.862732] ? v9fs_vfs_rename+0x2ef/0xd30 [ 359.866984] ? lockref_get+0x42/0x50 [ 359.870730] ? v9fs_vfs_rmdir+0x30/0x30 [ 359.874722] ? down_write_nested+0x8e/0x130 [ 359.879064] ? lock_two_nondirectories+0xdd/0x120 [ 359.883922] ? _down_write_nest_lock+0x130/0x130 [ 359.888705] ? kasan_check_write+0x14/0x20 [ 359.892964] ? do_raw_spin_lock+0xc1/0x200 [ 359.897219] vfs_rename+0x7fc/0x1a90 [ 359.900957] ? lookup_one_len+0x220/0x220 [ 359.905131] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.910700] ? security_path_rename+0x210/0x300 [ 359.915394] do_renameat2+0xea5/0x1180 [ 359.919323] ? user_path_create+0x40/0x40 [ 359.923490] ? __lock_is_held+0xb5/0x140 [ 359.927582] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.933146] ? check_preemption_disabled+0x48/0x200 [ 359.938223] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 359.943781] ? do_syscall_64+0x9a/0x820 [ 359.947776] ? do_syscall_64+0x9a/0x820 [ 359.951770] ? trace_hardirqs_on+0xbd/0x310 [ 359.956107] ? __ia32_sys_read+0xb0/0xb0 22:26:35 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) accept4$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c, 0x800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r3) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x80) [ 359.960220] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.965605] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 359.971080] __x64_sys_rename+0x5e/0x80 [ 359.975084] do_syscall_64+0x1b9/0x820 [ 359.978987] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 359.984369] ? syscall_return_slowpath+0x5e0/0x5e0 [ 359.989318] ? trace_hardirqs_on_caller+0x310/0x310 [ 359.989339] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 359.989360] ? recalc_sigpending_tsk+0x180/0x180 [ 359.999384] ? kasan_check_write+0x14/0x20 [ 359.999409] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 359.999434] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.999447] RIP: 0033:0x457579 [ 359.999464] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 359.999472] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 359.999487] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 359.999503] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 360.063405] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 360.070708] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 360.077996] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:35 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="b24c0000e1f80000766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7, 0x200000) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f00000000c0)) 22:26:35 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000000000000000000000"], 0x14) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:35 executing program 4 (fault-call:14 fault-nth:25): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:35 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x200, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, 0x8000, 0x9, 0x9, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x3, 0x9, 0xffff, 0x100, 0x40}, @sadb_ident={0x2, 0xb, 0x0, 0x0, 0x8}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}]}, 0x48}}, 0x40000) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x40, 0x0) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) accept$unix(r3, 0x0, &(0x7f00000001c0)) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:35 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x20200, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x57a1, 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r1) fchmod(r1, 0x34) [ 360.322774] FAULT_INJECTION: forcing a failure. [ 360.322774] name failslab, interval 1, probability 0, space 0, times 0 [ 360.334302] CPU: 1 PID: 14583 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 360.341677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.351053] Call Trace: [ 360.353662] dump_stack+0x1c4/0x2b4 [ 360.357306] ? dump_stack_print_info.cold.2+0x52/0x52 [ 360.362517] should_fail.cold.4+0xa/0x17 [ 360.366591] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 360.371700] ? graph_lock+0x170/0x170 [ 360.375533] ? graph_lock+0x170/0x170 [ 360.379368] ? mark_held_locks+0x130/0x130 [ 360.379383] ? find_held_lock+0x36/0x1c0 [ 360.379404] ? __debug_object_init+0x57d/0x1290 [ 360.379420] ? lock_downgrade+0x900/0x900 [ 360.379438] ? lock_downgrade+0x900/0x900 [ 360.400657] ? trace_hardirqs_off+0xb8/0x310 [ 360.405092] ? kasan_check_read+0x11/0x20 [ 360.409260] ? do_raw_spin_unlock+0xa7/0x2f0 [ 360.413687] ? trace_hardirqs_on+0x310/0x310 [ 360.418151] ? kasan_check_write+0x14/0x20 [ 360.422403] __should_failslab+0x124/0x180 [ 360.426628] should_failslab+0x9/0x14 [ 360.430430] kmem_cache_alloc+0x47/0x730 [ 360.434503] ? print_usage_bug+0xc0/0xc0 [ 360.438555] ? lock_downgrade+0x900/0x900 [ 360.442692] ? _raw_spin_unlock_irq+0x60/0x80 [ 360.447208] radix_tree_node_alloc.constprop.18+0x1f7/0x370 [ 360.452928] radix_tree_extend+0x294/0x660 [ 360.457167] ? radix_tree_node_alloc.constprop.18+0x370/0x370 [ 360.463053] ? trace_hardirqs_off+0xb8/0x310 [ 360.467449] ? kasan_check_read+0x11/0x20 [ 360.471599] ? check_noncircular+0x20/0x20 [ 360.475833] idr_get_free+0x83d/0xec0 [ 360.479748] ? ida_pre_get+0x130/0x130 [ 360.483628] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.489156] ? check_preemption_disabled+0x48/0x200 [ 360.494204] ? __call_rcu.constprop.69+0x373/0xbc0 [ 360.499147] ? rcu_is_watching+0x30/0x30 [ 360.503209] ? __lock_acquire+0x7ec/0x4ec0 [ 360.507440] ? print_usage_bug+0xc0/0xc0 [ 360.511494] idr_alloc_u32+0x201/0x3f0 [ 360.515380] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 360.520238] ? p9_idpool_get+0x23/0x90 [ 360.524118] idr_alloc+0x111/0x1b0 [ 360.527645] ? idr_alloc_u32+0x3f0/0x3f0 [ 360.531699] ? do_raw_spin_lock+0xc1/0x200 [ 360.535927] p9_idpool_get+0x3d/0x90 [ 360.539633] p9_client_prepare_req.part.8+0xec/0xc30 [ 360.544729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.550272] ? node_tag_set+0xc6/0x170 [ 360.554152] ? p9_free_req.isra.7+0x140/0x140 [ 360.558674] ? find_held_lock+0x36/0x1c0 [ 360.562734] p9_client_rpc+0x1c2/0x1480 [ 360.566700] ? check_preemption_disabled+0x48/0x200 [ 360.571709] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 360.577090] ? __lock_is_held+0xb5/0x140 [ 360.581179] ? __lock_is_held+0xb5/0x140 [ 360.585231] ? lock_acquire+0x1ed/0x520 [ 360.589205] ? v9fs_vfs_rename+0x330/0xd30 [ 360.593442] ? lock_release+0x970/0x970 [ 360.597404] ? arch_local_save_flags+0x40/0x40 [ 360.601976] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 360.606979] ? graph_lock+0x170/0x170 [ 360.610773] ? graph_lock+0x170/0x170 [ 360.614566] ? down_write+0x8a/0x130 [ 360.618296] ? v9fs_vfs_rename+0x330/0xd30 [ 360.622526] p9_client_wstat+0x20d/0x340 [ 360.626583] v9fs_vfs_rename+0x9ab/0xd30 [ 360.630650] ? lockref_get+0x42/0x50 [ 360.634359] ? v9fs_vfs_rmdir+0x30/0x30 [ 360.638358] vfs_rename+0x7fc/0x1a90 [ 360.642080] ? lookup_one_len+0x220/0x220 [ 360.646235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.651776] ? security_path_rename+0x210/0x300 [ 360.656449] do_renameat2+0xea5/0x1180 [ 360.660335] ? user_path_create+0x40/0x40 [ 360.664471] ? __lock_is_held+0xb5/0x140 [ 360.668540] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.674094] ? check_preemption_disabled+0x48/0x200 [ 360.679122] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 360.684652] ? do_syscall_64+0x9a/0x820 [ 360.689136] ? do_syscall_64+0x9a/0x820 [ 360.693132] ? trace_hardirqs_on+0xbd/0x310 [ 360.697466] ? __ia32_sys_read+0xb0/0xb0 [ 360.701519] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.706882] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 360.712330] __x64_sys_rename+0x5e/0x80 [ 360.716299] do_syscall_64+0x1b9/0x820 [ 360.720216] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 360.725587] ? syscall_return_slowpath+0x5e0/0x5e0 [ 360.730520] ? trace_hardirqs_on_caller+0x310/0x310 [ 360.735529] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 360.740543] ? recalc_sigpending_tsk+0x180/0x180 [ 360.745291] ? kasan_check_write+0x14/0x20 [ 360.749520] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 360.754357] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.759532] RIP: 0033:0x457579 [ 360.762718] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.781607] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 360.789308] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 360.796567] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 360.803848] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 360.811108] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 360.818454] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:35 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) ioctl$void(r2, 0x5451) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2be1f392b7cd57a49c81a128980ab882ea0eb3a38853d88582fa5114ed5ef28474719567aa8ea86855b4f5e042e6ada30eb76dda5481dd15ff79a35f4f03d231d3442933fddbf58bdcee0bf044a18dc7fc2d4bd6aaef338fe9da1aaeb943f9c2b4bd000453951070f172772a1507869ecad14bb56b33460f292d71da4d07e11e1adebae0266e8370eca4af5e8ea571a56718354cc010576e"]) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:35 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000000000000000000000"], 0x14) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:35 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) recvfrom$llc(r1, &(0x7f00000000c0)=""/233, 0xe9, 0x40, &(0x7f00000001c0)={0x1a, 0xffff, 0x8ce4, 0x0, 0x9, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) connect(r0, &(0x7f0000000500)=@in6={0xa, 0x4e22, 0x7, @empty, 0x80}, 0x80) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r3 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x5, 0x101) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000340)={0xe, 0x4, {0x56, 0xe8b, 0x6, {0x6, 0x8}, {0x0, 0x876}, @period={0x59, 0x4, 0x5, 0x2, 0x1, {0x200000000000000, 0xaf, 0x2, 0x4}, 0x2, &(0x7f0000000300)=[0x2, 0x40]}}, {0x54, 0x77a08fbf, 0x5, {0x4, 0x2}, {0x200, 0x400}, @ramp={0x5, 0x3, {0x20, 0x0, 0x9, 0x1}}}}) close(r2) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000200)={@loopback}, &(0x7f0000000240)=0x14) syz_read_part_table(0x200, 0x3, &(0x7f0000000480)=[{&(0x7f00000003c0)="3b1815f15e78c67cb5445f19cabc80eb387324c4b89e9fac345e298a98a345d4e80981d10315b7ffcff2639ec4", 0x2d, 0x8}, {&(0x7f0000000400)="baaced81c43097876193fc414c160ce7c88d1062689aa29308d97dbf542791dcdb26e3180fd5254d2bab109daed91807461a6d89a542", 0x36, 0x36}, {&(0x7f0000000440)="7680bd14c420446d0a74a7bbffbf7c322b6593450a635a62ebc8565775ae18e667bdd5e9b42d1984bebf7391a73bf3b80e764aaa45f893b788f2", 0x3a, 0x3ff}]) 22:26:35 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x400100) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x100000000) 22:26:35 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000010000007f000000000000000300000000000000", @ANYRES32=r0, @ANYBLOB="00000000fdf4ffffffffffff00000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000810700000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="000000332ef95d00fb0000e68eb1be7ac91557d5a2b500007e3ca8416680006c42bfd97c8f6f0f4cf8c1ed6218b4db70249ec1deff92508a3175565d634e9e8a"]) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) close(r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syzkaller1\x00', r2}) 22:26:35 executing program 4 (fault-call:14 fault-nth:26): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:36 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f01000100000000000000000000000000"], 0x15) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 360.996929] 9pnet: Insufficient options for proto=fd [ 361.007274] Dev loop5: unable to read RDB block 3 [ 361.012601] loop5: unable to read partition table [ 361.022410] loop5: partition table beyond EOD, truncated [ 361.025395] 9pnet: Insufficient options for proto=fd [ 361.048844] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 361.099393] FAULT_INJECTION: forcing a failure. [ 361.099393] name failslab, interval 1, probability 0, space 0, times 0 [ 361.110639] CPU: 1 PID: 14619 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 361.118017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.127393] Call Trace: [ 361.130005] dump_stack+0x1c4/0x2b4 [ 361.133653] ? dump_stack_print_info.cold.2+0x52/0x52 [ 361.138867] ? __lock_is_held+0xb5/0x140 [ 361.142963] should_fail.cold.4+0xa/0x17 [ 361.147053] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 361.152175] ? graph_lock+0x170/0x170 [ 361.152194] ? graph_lock+0x170/0x170 [ 361.159788] ? __account_cfs_rq_runtime+0x790/0x790 [ 361.159816] ? mark_held_locks+0x130/0x130 [ 361.159830] ? find_held_lock+0x36/0x1c0 [ 361.159851] ? __debug_object_init+0x57d/0x1290 [ 361.159870] ? lock_downgrade+0x900/0x900 [ 361.173188] ? lock_downgrade+0x900/0x900 [ 361.173213] ? trace_hardirqs_off+0xb8/0x310 [ 361.173226] ? kasan_check_read+0x11/0x20 [ 361.173243] ? do_raw_spin_unlock+0xa7/0x2f0 [ 361.173262] ? trace_hardirqs_on+0x310/0x310 [ 361.182101] ? kasan_check_write+0x14/0x20 [ 361.182130] __should_failslab+0x124/0x180 [ 361.182147] should_failslab+0x9/0x14 [ 361.182179] kmem_cache_alloc+0x47/0x730 [ 361.219969] ? print_usage_bug+0xc0/0xc0 [ 361.224090] ? lock_downgrade+0x900/0x900 [ 361.228266] radix_tree_node_alloc.constprop.18+0x1f7/0x370 [ 361.234006] radix_tree_extend+0x294/0x660 [ 361.238262] ? radix_tree_node_alloc.constprop.18+0x370/0x370 [ 361.244177] ? trace_hardirqs_off+0xb8/0x310 [ 361.248597] ? kasan_check_read+0x11/0x20 [ 361.252762] ? check_noncircular+0x20/0x20 [ 361.257023] idr_get_free+0x83d/0xec0 [ 361.260860] ? ida_pre_get+0x130/0x130 [ 361.264765] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.270322] ? check_preemption_disabled+0x48/0x200 [ 361.275365] ? __call_rcu.constprop.69+0x373/0xbc0 [ 361.280321] ? rcu_is_watching+0x30/0x30 [ 361.284396] ? __lock_acquire+0x7ec/0x4ec0 [ 361.288656] ? print_usage_bug+0xc0/0xc0 [ 361.292730] idr_alloc_u32+0x201/0x3f0 [ 361.296635] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 361.301495] ? p9_idpool_get+0x23/0x90 [ 361.305402] idr_alloc+0x111/0x1b0 [ 361.308969] ? idr_alloc_u32+0x3f0/0x3f0 [ 361.313051] ? do_raw_spin_lock+0xc1/0x200 [ 361.313080] p9_idpool_get+0x3d/0x90 [ 361.313101] p9_client_prepare_req.part.8+0xec/0xc30 [ 361.313124] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.321064] ? node_tag_set+0xc6/0x170 [ 361.321087] ? p9_free_req.isra.7+0x140/0x140 [ 361.321104] ? find_held_lock+0x36/0x1c0 [ 361.321136] p9_client_rpc+0x1c2/0x1480 22:26:36 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f01000100000000000000000000000000"], 0x15) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:36 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) fchmodat(r1, &(0x7f0000000000)='./file0\x00', 0x1) ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:36 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000002c0)={0x0, 0x0, 0x2080}) close(r1) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 22:26:36 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") fcntl$addseals(r0, 0x409, 0xd) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7f, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/13) r2 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x4, 0x200, 0x1, 0x0, 0x0, [{r0, 0x0, 0x8}]}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r2) 22:26:36 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000080)="68ffe7a3d1acb6e525484b5f08a1265633fef4895c36659a4a61e371297caec387cc55c9c134250d1077f9c0f90e832f2c", 0x31) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00') sendmsg$nl_netfilter(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80035800}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x218, 0x12, 0x9, 0x400, 0x70bd27, 0x25dfdbfb, {0x5, 0x0, 0x6}, [@nested={0x124, 0x6b, [@generic="c56fbdb4bebe1ec555d39c9a12bc2b9880135437355c45558a5f6cc859f8544e1ab9694263112cf0b12d1d1d14814da5c724ff94ef42e90ab66f45248a6787da8b70d81395cb377fa788b6048b31cc7be633356f08bcb1a610424f65c2eee3a7d83b8e5a70e531a8c295b45d", @typed={0x14, 0x7f, @ipv6=@mcast1}, @typed={0x14, 0x2, @ipv6}, @generic="4703e566a65751abc65d399ae6c8a442ef5da0c8ea84380f215e7c8612b5e41176bb17ea0e2bf0c5ea9822a5856966623607e850086864b7bfd6ceb03e5a0156508a4b8c1d2f4f19fb9d7bc1ac4cf38ee1e9cf7402d038bb25b04d0be06b2cc015aea875d293ef8c4c0355593e4a6c2b3406d1e870e5806320ad7df754dffe445b687d4e2cf1cbf7b7140877"]}, @generic="a1d6401b5ebdebaae343b9b824927e52e4e54749d72495", @nested={0xac, 0x37, [@generic="9631c1f1159ef45bf848128820c7698cec8d57af48a6918b1fe0e0bc3322bb6655aada7d4b9dce05f488772fde4a0e23f8392cd211ca349067ec7c35961e90c786696c86a930fcf87c1b1bbeed515b64e9ae4bf2ea6f579d8fbf7f24d59940bd3b2da6eb8b907562013eced0667ea4e6796162e0ac324dc11544ccc811b62f4e6cb2eb146fcc93e98bbb174cf457218b7e39d1649f63a87b6624804aa1b093ecb373624d0e85f9"]}, @typed={0xc, 0x13, @u64=0x9}, @typed={0x4, 0x12}, @typed={0x4, 0x13}, @typed={0x8, 0x6e, @ipv4=@multicast1}]}, 0x218}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) [ 361.321155] ? check_preemption_disabled+0x48/0x200 [ 361.321192] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 361.321209] ? __lock_is_held+0xb5/0x140 [ 361.362663] ? __lock_is_held+0xb5/0x140 [ 361.366753] ? lock_acquire+0x1ed/0x520 [ 361.370741] ? v9fs_vfs_rename+0x330/0xd30 [ 361.374997] ? lock_release+0x970/0x970 [ 361.378990] ? arch_local_save_flags+0x40/0x40 [ 361.383591] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 361.388617] ? graph_lock+0x170/0x170 [ 361.392428] ? graph_lock+0x170/0x170 [ 361.396252] ? down_write+0x8a/0x130 [ 361.399982] ? v9fs_vfs_rename+0x330/0xd30 [ 361.400008] p9_client_wstat+0x20d/0x340 [ 361.400030] v9fs_vfs_rename+0x9ab/0xd30 [ 361.400052] ? lockref_get+0x42/0x50 [ 361.400076] ? v9fs_vfs_rmdir+0x30/0x30 [ 361.408394] vfs_rename+0x7fc/0x1a90 [ 361.408420] ? lookup_one_len+0x220/0x220 [ 361.408448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.433551] ? security_path_rename+0x210/0x300 [ 361.438247] do_renameat2+0xea5/0x1180 [ 361.442181] ? user_path_create+0x40/0x40 [ 361.446354] ? __lock_is_held+0xb5/0x140 [ 361.450446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.455997] ? check_preemption_disabled+0x48/0x200 [ 361.461042] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 361.466597] ? do_syscall_64+0x9a/0x820 [ 361.470582] ? do_syscall_64+0x9a/0x820 [ 361.474572] ? trace_hardirqs_on+0xbd/0x310 [ 361.478901] ? __ia32_sys_read+0xb0/0xb0 [ 361.482977] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.488355] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 361.493828] __x64_sys_rename+0x5e/0x80 [ 361.497816] do_syscall_64+0x1b9/0x820 [ 361.501711] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 361.507088] ? syscall_return_slowpath+0x5e0/0x5e0 [ 361.512033] ? trace_hardirqs_on_caller+0x310/0x310 [ 361.517076] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 361.522104] ? recalc_sigpending_tsk+0x180/0x180 [ 361.526873] ? kasan_check_write+0x14/0x20 [ 361.531129] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 361.536003] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.541197] RIP: 0033:0x457579 [ 361.544401] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 361.563317] RSP: 002b:00007fb73dde1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 361.571052] RAX: ffffffffffffffda RBX: 00007fb73dde1c90 RCX: 0000000000457579 [ 361.578345] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 361.585628] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 361.592911] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73dde26d4 22:26:36 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0xffffff8d, 'vboxnet1trustedlo'}}, 0x56) socket$inet_tcp(0x2, 0x1, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="7472616e733f66642c726e646e6f3d2a4616b17c308c72668ae187192112c3dcf83743f457f12d3f1967037aec33678958d6b56517b2a845875a85db4626b06f2d53f4721b5367be8753f6899235f4c8c1db81b9337136f0ac0100000000000000ce6febe545c9e689d2e1c226a11ad48c02838b", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:36 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x10400) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x400) close(r1) epoll_create(0xff) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x680800, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000100)) [ 361.600196] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 [ 361.724276] Dev loop5: unable to read RDB block 3 22:26:36 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x10000, 0xb0000) getsockopt$inet_dccp_buf(r3, 0x21, 0x0, &(0x7f0000000140)=""/65, &(0x7f0000000200)=0x41) r4 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x6, 0x100) mknodat(r4, &(0x7f00000000c0)='./file0\x00', 0x84, 0x400) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000001c0)={{0x3, 0x2, 0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:36 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4a002, 0x0) 22:26:36 executing program 4 (fault-call:14 fault-nth:27): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:36 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xe9) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) timerfd_create(0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) close(r3) 22:26:36 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f01000100000000000000000000000000"], 0x15) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 361.746068] loop5: unable to read partition table [ 361.759757] loop5: partition table beyond EOD, truncated [ 361.765281] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 22:26:36 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r3 = getpid() perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x100000001, 0x77, 0x3, 0x35e, 0x0, 0x4, 0xdd20, 0x2, 0xdd, 0x7fff, 0x9, 0xffffffffffff0001, 0x7, 0x1, 0x1f, 0x100000000, 0x0, 0x8, 0xd001, 0x8, 0x2, 0x5, 0x9, 0x5, 0x0, 0x7f, 0xfffffffffffffffc, 0x4, 0x80, 0x401, 0x6, 0x100, 0x4, 0x8, 0x9, 0x889a, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x800, 0x8, 0xfffffffffffeffff, 0x6, 0x7, 0x3ff, 0x7}, r3, 0x3, 0xffffffffffffffff, 0x3) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) [ 361.935872] FAULT_INJECTION: forcing a failure. [ 361.935872] name failslab, interval 1, probability 0, space 0, times 0 [ 361.947419] CPU: 1 PID: 14657 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #264 [ 361.947435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.947442] Call Trace: [ 361.947480] dump_stack+0x1c4/0x2b4 [ 361.970413] ? dump_stack_print_info.cold.2+0x52/0x52 [ 361.975637] should_fail.cold.4+0xa/0x17 [ 361.979721] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 361.985553] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 361.990727] ? print_usage_bug+0xc0/0xc0 [ 361.994819] ? __lock_acquire+0x7ec/0x4ec0 [ 361.999176] ? __lock_is_held+0xb5/0x140 [ 362.003252] ? __account_cfs_rq_runtime+0x790/0x790 [ 362.008307] ? check_noncircular+0x20/0x20 [ 362.012558] ? graph_lock+0x170/0x170 [ 362.016372] ? graph_lock+0x170/0x170 [ 362.020193] ? select_task_rq_fair+0x34f0/0x34f0 [ 362.025013] ? check_noncircular+0x20/0x20 [ 362.029273] ? check_noncircular+0x20/0x20 [ 362.033525] ? mark_held_locks+0x130/0x130 [ 362.037809] ? find_held_lock+0x36/0x1c0 [ 362.041898] __should_failslab+0x124/0x180 [ 362.046150] should_failslab+0x9/0x14 [ 362.049998] kmem_cache_alloc+0x47/0x730 [ 362.054285] ? graph_lock+0x170/0x170 [ 362.058219] radix_tree_node_alloc.constprop.18+0x1f7/0x370 [ 362.063974] radix_tree_extend+0x294/0x660 [ 362.068508] ? radix_tree_node_alloc.constprop.18+0x370/0x370 [ 362.074445] ? debug_object_activate+0x402/0x600 [ 362.079243] idr_get_free+0x83d/0xec0 [ 362.083094] ? ida_pre_get+0x130/0x130 [ 362.087022] ? mark_held_locks+0x130/0x130 [ 362.091310] ? trace_hardirqs_on+0x310/0x310 [ 362.095768] ? mark_held_locks+0x130/0x130 [ 362.100037] ? trace_hardirqs_off+0xb8/0x310 [ 362.104476] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 362.109798] ? trace_hardirqs_on+0x310/0x310 [ 362.114232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.119799] idr_alloc_u32+0x201/0x3f0 [ 362.123719] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 362.128586] ? p9_idpool_get+0x23/0x90 [ 362.132499] ? __lock_acquire+0x7ec/0x4ec0 [ 362.136759] idr_alloc+0x111/0x1b0 [ 362.140322] ? idr_alloc_u32+0x3f0/0x3f0 [ 362.144409] ? do_raw_spin_lock+0xc1/0x200 [ 362.148672] p9_idpool_get+0x3d/0x90 [ 362.152410] p9_client_prepare_req.part.8+0xec/0xc30 [ 362.157550] ? p9_free_req.isra.7+0x140/0x140 [ 362.162098] ? kasan_check_read+0x11/0x20 [ 362.166289] ? do_raw_spin_unlock+0xa7/0x2f0 [ 362.170722] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 362.175337] ? __d_lookup_done+0x610/0x610 [ 362.179599] p9_client_rpc+0x1c2/0x1480 [ 362.183610] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 362.188990] ? graph_lock+0x170/0x170 [ 362.192814] ? graph_lock+0x170/0x170 [ 362.196639] ? find_held_lock+0x36/0x1c0 [ 362.200728] ? v9fs_vfs_rename+0x3eb/0xd30 [ 362.205019] ? lock_downgrade+0x900/0x900 [ 362.209206] ? d_move+0x78/0x90 [ 362.212501] ? lock_downgrade+0x900/0x900 [ 362.216666] ? lock_downgrade+0x900/0x900 [ 362.220871] ? up_write+0x7b/0x220 [ 362.224437] p9_client_clunk+0x93/0x180 [ 362.228438] v9fs_vfs_rename+0x3f7/0xd30 [ 362.232510] ? lockref_get+0x42/0x50 [ 362.236254] ? v9fs_vfs_rmdir+0x30/0x30 [ 362.240283] vfs_rename+0x7fc/0x1a90 [ 362.244029] ? lookup_one_len+0x220/0x220 [ 362.248219] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.253808] ? security_path_rename+0x210/0x300 [ 362.258498] do_renameat2+0xea5/0x1180 [ 362.262421] ? user_path_create+0x40/0x40 [ 362.266594] ? __lock_is_held+0xb5/0x140 [ 362.270681] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.276255] ? check_preemption_disabled+0x48/0x200 [ 362.281313] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 362.286871] ? do_syscall_64+0x9a/0x820 [ 362.290858] ? do_syscall_64+0x9a/0x820 [ 362.294849] ? trace_hardirqs_on+0xbd/0x310 [ 362.299195] ? __ia32_sys_read+0xb0/0xb0 [ 362.303275] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.308651] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 362.314126] __x64_sys_rename+0x5e/0x80 [ 362.318126] do_syscall_64+0x1b9/0x820 [ 362.322037] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 362.327427] ? syscall_return_slowpath+0x5e0/0x5e0 [ 362.332378] ? trace_hardirqs_on_caller+0x310/0x310 [ 362.337416] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 362.342450] ? recalc_sigpending_tsk+0x180/0x180 [ 362.347224] ? kasan_check_write+0x14/0x20 [ 362.351482] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 362.356362] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.361588] RIP: 0033:0x457579 [ 362.364819] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.383736] RSP: 002b:00007fb73de02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 362.391469] RAX: ffffffffffffffda RBX: 00007fb73de02c90 RCX: 0000000000457579 [ 362.398766] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 362.406059] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 362.413385] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73de036d4 [ 362.420667] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 0000000000000005 22:26:37 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) r2 = request_key(&(0x7f0000000780)='ceph\x00', &(0x7f00000007c0)={'syz', 0x3}, &(0x7f0000000900)='noextend', 0xffffffffffffffff) add_key(&(0x7f0000000640)="69785c1fd3", &(0x7f00000006c0)={'syz'}, 0x0, 0x0, r2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f323400c02a3f573a9ce4a0a816d0bcd904ecffffffffffff7f0000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="56007d010000004f0000000000000000000000000000000000000000000000000000000000000000000000000000000001002805007266646e6f05007266646e6f110076626f786e657431747275737465646c6f0000"], 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) truncate(&(0x7f0000000680)='./file0/file1\x00', 0x13f9f977) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x5, 0x20, 0x7fff, 0x7, 0x0, 0x200}) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x1000, @mcast1, 0x1}, r3}}, 0x30) write$P9_RGETATTR(r1, &(0x7f0000000a80)={0xcb5c709d570f5d88, 0x19, 0x1, {0x0, {0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d3bea31b82a799cf5b45349b720dba7357be1fe314132037549479c2e90fed4b1384387bed880f437e9ca47cfcd17187222c27d0aef9c4e0fa1b143f33567477f063cc291f21b5847f5958a6e756e0ed7072c5bf8ad43b0d0d2a8ffd4b058ec843063049d1f09aa223909182e0e80a5bdff674dfd870851210ebf894601e99c5128ac5f79c097f4a5cb105c2088f604349c1315447e34a040d7b107bb91781c2a69f35227111b3c2b0bcb1977f974ab6ffb5dea10963cac81d30281ec0eecc496795e6009ef1e1e326d1828825bbf8635fce31b8d", @ANYRESHEX=r1, @ANYBLOB="00009df8d63f6dd9a7873ba9d9f27e8f7f796b479ba0f74b0e17a539ea6befd9c32ca46dfcb79dde638a47d49608ffbaa882f3f0e33eebc9064d337c708ed13315aea6737bd53d912b2f4a4bbb3f85bca595748cb76f7587716648f1e5f2558fe451854285376660064f389c6699badcd6ea11780a162acc45c08c3463e58cc8291d6562e9596fa9c6"]) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') r4 = syz_open_dev$vcsn(&(0x7f00000009c0)='/dev/vcs#\x00', 0x2, 0x100) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000a40)='team\x00') getsockname$packet(0xffffffffffffff9c, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b80)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c00)=0x14, 0x80000) accept$packet(0xffffffffffffffff, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000e40)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f00000011c0)={@loopback, 0x0}, &(0x7f0000001200)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001280)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000007900)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000007980)={@rand_addr, @dev, 0x0}, &(0x7f00000079c0)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000007a00)={'team0\x00', 0x0}) accept$packet(0xffffffffffffff9c, &(0x7f0000007a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000007a80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000009400)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000009440)={@mcast1, 0x0}, &(0x7f0000009480)=0x14) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000009800)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f00000097c0)={&(0x7f00000094c0)={0x2fc, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0xe8, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1f}}}]}}, {{0x8, 0x1, r8}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x164, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8, 0x1, r15}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}]}}]}, 0x2fc}}, 0x4800) r17 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000940), &(0x7f0000000980)=0xc) 22:26:37 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) fcntl$setflags(r1, 0x2, 0x1) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40040, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000140)=""/136, &(0x7f0000000200)=0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x28, &(0x7f00000000c0)}, 0x10) 22:26:37 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x2, 0xa400) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:37 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x0, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10) r5 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff801, 0x0) ioctl$RNDZAPENTCNT(r5, 0x5204, &(0x7f00000000c0)=0x6) r6 = msgget$private(0x0, 0x132) msgctl$MSG_INFO(r6, 0xc, &(0x7f0000001040)=""/4096) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:37 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 362.609782] 9pnet: Insufficient options for proto=fd 22:26:37 executing program 1: r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) fcntl$setown(r0, 0x8, r1) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x80000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x1, 0x2, 0x765e, 0x1, 0x401, 0x0, 0x8001, 0xc0, 0x9, 0x1, 0xff, 0x35}) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r4 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) close(r4) 22:26:37 executing program 4 (fault-call:14 fault-nth:28): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 362.636434] 9pnet: Insufficient options for proto=fd 22:26:37 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xe0f, 0x2) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000000c0)={0x0, 0x0, @ioapic}) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r3) 22:26:37 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000bec20cb57ed95e85e05c3660caeaeb349369f966222337b4ebeb02f8723f2495d3967e87fff93882ab4dea11bbcfa6a2c8b12f6229245f7673d4d963f868501587066f60d58561538bfbac47801f206eb3f7dd77855ebf7333bce0ca9e3837dd64e5042c40"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) r2 = fcntl$getown(r0, 0x9) migrate_pages(r2, 0x10001, &(0x7f0000000080), &(0x7f0000000180)=0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:37 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:37 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4401) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xfffffffffffffcc9) recvmmsg(r0, &(0x7f0000002840)=[{{&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/93, 0x5d}], 0x1, 0x0, 0x0, 0x8e3c000000000000}, 0x6}, {{&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)=""/249, 0xf9}], 0x1, &(0x7f0000000740)=""/9, 0x9, 0xfffffffffffeffff}, 0x2}, {{&(0x7f0000000780)=@l2, 0x80, &(0x7f0000001000)=[{&(0x7f0000000800)=""/82, 0x52}, {&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000a00)=""/201, 0xc9}, {&(0x7f0000000b00)=""/159, 0x9f}, {&(0x7f0000000bc0)=""/160, 0xa0}, {&(0x7f0000000c80)=""/216, 0xd8}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000000e80)=""/170, 0xaa}, {&(0x7f0000000f40)=""/182, 0xb6}], 0xa, &(0x7f00000010c0)=""/217, 0xd9, 0x941}, 0x6}, {{&(0x7f00000011c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000002540)=[{&(0x7f0000001240)=""/119, 0x77}, {&(0x7f00000012c0)=""/176, 0xb0}, {&(0x7f0000001380)=""/23, 0x17}, {&(0x7f00000013c0)=""/105, 0x69}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/68, 0x44}, {&(0x7f00000024c0)=""/118, 0x76}], 0x5, &(0x7f00000025c0)=""/111, 0x6f, 0x8}, 0x400}, {{&(0x7f0000002640)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002700)=[{&(0x7f00000026c0)=""/44, 0x2c}], 0x1, &(0x7f0000002740)=""/204, 0xcc, 0x9}, 0x1}], 0x5, 0x40000000, 0x0) getsockname$packet(r0, &(0x7f0000002980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000029c0)=0x14) clock_gettime(0x0, &(0x7f0000005f80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005e40)=[{{&(0x7f0000002a40)=@sco, 0x80, &(0x7f0000003c80)=[{&(0x7f0000002ac0)=""/221, 0xdd}, {&(0x7f0000002bc0)=""/169, 0xa9}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x3, &(0x7f0000003cc0)=""/125, 0x7d, 0x60}, 0xfb}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000003d40)=""/152, 0x98}, {&(0x7f0000003e00)=""/145, 0x91}, {&(0x7f0000003ec0)=""/3, 0x3}, {&(0x7f0000003f00)=""/13, 0xd}, {&(0x7f0000003f40)=""/163, 0xa3}], 0x5, &(0x7f0000004080)=""/83, 0x53, 0x7}, 0x8}, {{&(0x7f0000004100)=@can={0x1d, 0x0}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004180)=""/11, 0xb}], 0x1, 0x0, 0x0, 0x1}, 0x82}, {{&(0x7f0000004200), 0x80, &(0x7f00000044c0)=[{&(0x7f0000004280)=""/188, 0xbc}, {&(0x7f0000004340)=""/161, 0xa1}, {&(0x7f0000004400)=""/179, 0xb3}], 0x3, &(0x7f0000004500)=""/4096, 0x1000, 0x8}, 0x5}, {{&(0x7f0000005500)=@l2, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000005580)=""/252, 0xfc}, {&(0x7f0000005680)=""/234, 0xea}, {&(0x7f0000005780)=""/215, 0xd7}, {&(0x7f0000005880)=""/221, 0xdd}, {&(0x7f0000005980)=""/211, 0xd3}, {&(0x7f0000005a80)=""/243, 0xf3}, {&(0x7f0000005b80)=""/157, 0x9d}, {&(0x7f0000005c40)=""/67, 0x43}], 0x8, &(0x7f0000005d40)=""/228, 0xe4, 0x7}, 0x1}], 0x5, 0x40, &(0x7f0000005fc0)={r7, r8+10000000}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000006000)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000006100)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000006140)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000006240)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000062c0)={'vcan0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006740)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000006900)={@empty, 0x0}, &(0x7f0000006940)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000006a40)={@empty, @broadcast, 0x0}, &(0x7f0000006a80)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000006ac0)={@dev, @remote, 0x0}, &(0x7f0000006b00)=0xc) accept$packet(r0, &(0x7f0000006b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006b80)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000006d40)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000006e40)=0xe8) getsockname(r1, &(0x7f0000006e80)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000006f00)=0x80) r20 = accept(r1, &(0x7f0000006f40)=@can={0x1d, 0x0}, &(0x7f0000006fc0)=0x80) sendmsg$alg(r20, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000006300)="dbe6156764d6e4dc0e2a468f66e6ae22b7352acc8521489271b6e717b8cfdab591d1057d49c78571d4f62f5a68b80d9af96228e96a1d7156cef1f14c3a731b127ad7ca28137e1adfad88127b7c", 0x4d}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000007000)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000007100)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000077c0)={&(0x7f00000063c0)={0x10, 0x0, 0x0, 0x10020}, 0xc, &(0x7f0000007780)={&(0x7f0000007800)=ANY=[@ANYBLOB="18060000", @ANYRES16=r2, @ANYBLOB="000227bd7000fbdbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="8c010200d5010100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100000008000600", @ANYRES32=r4, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="f800020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000700000008000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c0004006861736800000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400db05000008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400ff00000008000100", @ANYRES32=0x0, @ANYBLOB="400002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r11, @ANYBLOB="480102003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000800000008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r14, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="fc00020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040008000000080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e0000000800040040c8000008000600", @ANYRES32=r17, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="4400020040000300240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000008000100", @ANYRES32=r19, @ANYBLOB="800002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r21, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400aa00000008000600", @ANYRES32=r22], 0x618}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r23 = socket$inet6_udp(0xa, 0x2, 0x0) r24 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000006380)={r19, @multicast2, @rand_addr=0x2}, 0xc) connect$l2tp(r24, &(0x7f00005fafd2)=@pppol2tp={0x18, 0x1, {0x0, r23, {0x2, 0x4e23, @rand_addr=0x2}, 0x2, 0x3, 0x3, 0x2}}, 0x26) connect$l2tp(r24, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r24, 0x1, 0x2, 0x2, 0x2, {0xa, 0x4e20, 0x1, @mcast2, 0x7}}}, 0xad) ioctl$FS_IOC_FSSETXATTR(r24, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:37 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0xffffffffffffffff) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) getsockname$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) 22:26:37 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000000c0)=0x300000000) 22:26:38 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:38 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="560000007d010000004f0000000000000000000000000000000000000000000000000000000000000000000000000000000001002805007266646e6f05007266646e6f110076626f786e657431747275737465649ddd"], 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:38 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:38 executing program 5: r0 = socket$inet6(0xa, 0x2005, 0x80000000000000b) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:38 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80400, 0x0) r3 = getpid() mq_notify(r2, &(0x7f00000000c0)={0x0, 0x1d, 0x2, @tid=r3}) read$eventfd(r2, &(0x7f00000001c0), 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000200)=0x60, 0x4) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000180)=0x78) 22:26:38 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x7}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) getresgid(&(0x7f0000000340)=0x0, &(0x7f00000006c0), &(0x7f0000000780)) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, r2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000, 0x0, 0x8000000, 0x100000000000, 0xffffffffffffffff}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') readlink(&(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000600)=""/141, 0x8d) 22:26:38 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4400, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000080)={0x0, 0x8, [0x81, 0x1]}) 22:26:38 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xfffffffffffffffb, 0x40000) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f00000000c0)={0x30, 0xf3}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x20002, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) 22:26:38 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x0, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:38 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c600bda68e4cb68980969d73fac41da99b1af86b0893892884b153529b0fe09b1e81376da7035894b27229d3f6a764a2502c18aaf02f16b0b1c29476bf8142a51fb08e4738bfe28"]) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:38 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000000080)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="21c671d514", @ANYRESDEC=r2, @ANYBLOB=',dont_measure,pcr=00000000000000000026,\x00']) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) socketpair(0x11, 0xa, 0x1ff, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f00000004c0)) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:38 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x8, 0x8000, 0x1}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e23, @multicast1}}, 0x4, 0x0, 0x80000001, 0x6, 0x2}, 0x98) r3 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r4 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000080)={{0x0, 0x0, 0x80, 0x1, 0x7}, 0x0, 0x7}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) close(r4) 22:26:38 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x0, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:38 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x4, 0x8002) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r2) [ 363.439296] 9pnet: Insufficient options for proto=fd 22:26:38 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x80000, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x1b3141, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000f, 0x100010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000940)={0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000001ac0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000001b80)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000001c40)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001f40)={0x190, 0x0, &(0x7f0000001d00)=[@transaction={0x40406300, {0x3, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x48, 0x8, &(0x7f0000000780)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}, @flat={0x77622a85, 0x10b, r3}, @fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x4}], &(0x7f0000000900)=[0x78]}}, @decrefs={0x40046307, 0x2}, @increfs_done={0x40106308, r4, 0x4}, @reply_sg={0x40486312, {{0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x38, 0x20, &(0x7f0000000980)=[@fda={0x66646185, 0x0, 0x3, 0x14}, @flat={0x73682a85, 0xa, r5, 0x2}], &(0x7f0000001a80)=[0x38, 0x20, 0x0, 0x20]}, 0x7}}, @reply={0x40406301, {0x4, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x18, 0x10, &(0x7f0000001b00)=[@flat={0x77622a85, 0x10a, r6, 0x2}], &(0x7f0000001b40)=[0x70, 0x40]}}, @increfs_done={0x40106308, r7, 0x2}, @register_looper, @transaction={0x40406300, {0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001bc0), &(0x7f0000001c00)=[0x40, 0x20, 0x18, 0x38]}}, @reply={0x40406301, {0x4, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x18, 0x28, &(0x7f0000001c80)=[@flat={0x77682a85, 0x100, r8, 0x1}], &(0x7f0000001cc0)=[0x0, 0x0, 0x48, 0x40, 0x0]}}], 0x75, 0x0, &(0x7f0000001ec0)="39f81629568017d1b6ca439c84080b469048fa2126022e9ace73c862658e17f3cc26e8556dd76a7f59e545b59c0928bb3c8b3bfa3f76a24677849880a35ea1a532eda1d97ce887f455273c0d9630c9a15304216a16211ce293480589832fd3adb4f614ac21b6905bb90ba776f93c2acc7b7ffde98c"}) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x100, 0x0) getsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000a80)=""/4096, &(0x7f0000000600)=0x1000) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:38 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r0, 0x80487436, &(0x7f0000000040)={0x1fffd, 0x0, 0x0, 0x0, 0xfffffffbfffffffb}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x10, &(0x7f0000000000)={&(0x7f0000000540)=""/4096, 0x1000, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r3, 0x4) [ 363.532779] 9pnet: Insufficient options for proto=fd 22:26:38 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) r2 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x200001) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000ffa000/0x3000)=nil}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/99, &(0x7f0000000100)=0x63) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000180)={0x4, 0x81}) 22:26:38 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@mcast2, r3}, 0x14) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) close(r2) 22:26:38 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x0, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:38 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7, 0x4d, 0xfffffffffffffffc}, 0xfffffe37) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1], 0xff7d) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="25962300000000c8d4676f0bad8829032e5a2443e4ef94de28012dd44214798ce0f0c1983829692531598beb05d7c459a3a75e", @ANYRESHEX=r1, @ANYBLOB=',\x00']) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:38 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000340)=0xc) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_hash='dont_hash'}, {@measure='measure'}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x77, 0x0, 0x33, 0x61, 0x37, 0x65], 0x2d, [0x37, 0x7d, 0x0, 0x65], 0x2d, [0x66, 0x77, 0x0, 0x62], 0x2d, [0x36, 0x37, 0x39, 0x39], 0x2d, [0x77, 0x0, 0x37, 0x31, 0x77, 0x39, 0x64, 0x37]}}}, {@fowner_gt={'fowner>', r2}}, {@uid_gt={'uid>', r2}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:38 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x204) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:38 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:38 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r2) 22:26:38 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r0) 22:26:38 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/hwrng\x00', 0x80000, 0x0) sendmsg$rds(r0, &(0x7f0000000d00)={&(0x7f0000000900)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000940)=""/72, 0x48}, {&(0x7f0000000a80)=""/98, 0x62}, {&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f0000000bc0)=""/247, 0xf7}], 0x4, 0x0, 0x0, 0x4000}, 0xdf88b94f6ba41b85) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a00000029010000000000000000000000000000000000000000cc00000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r2, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) socketpair$inet(0x2, 0x7, 0xc000000000000000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000340)={0x80000000, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x2, 0x40, 0x0}, &(0x7f0000000600)=0x20) fcntl$setstatus(r1, 0x4, 0x400) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000640)={r4, 0x3f, 0xc06, 0x2, 0x0, 0x5}, &(0x7f0000000780)=0x14) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r2, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r2, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r2, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r2, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) syz_open_dev$binder(&(0x7f0000000d40)='/dev/binder#\x00', 0x0, 0x802) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:39 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x9fffd}) 22:26:39 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4400, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000080)={0x0, 0x8, [0x81, 0x1]}) 22:26:39 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) setsockopt$inet6_dccp_int(r0, 0x21, 0xf, &(0x7f0000000100)=0x5, 0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x80000000000, 0x10480) write$P9_RSETATTR(r2, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r1) 22:26:39 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:39 executing program 4: pipe2$9p(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x200000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000600)=r3) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) gettid() write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1c087788cb5eba710000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="560000007d010000004f0000000000000000000000000000000000000000000000000000000001002805007266646e6f05007266646e6f110076626f786e657431747275737465646c6fb641439d6c0b1be4819a9bb70ec05f1b0bbd5162455d3010612e5f20d5c2fe623f844cea7f92d9e7f47439d772ed2ec4625b9d30df73b5e955ec3708f880ef6a4158b74b0ca9855fde16257f1a53c5a0b60d2723f0f51954036aa7"], 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000640), &(0x7f00000006c0)=0x68) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:39 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'syzkaller1\x00', 0xfffffffffffffffc}) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:39 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:39 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x10001, 0x28800) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r2) 22:26:39 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0xa1) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',\x00']) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:39 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) r2 = request_key(&(0x7f0000000780)='ceph\x00', &(0x7f00000007c0)={'syz', 0x3}, &(0x7f0000000900)='noextend', 0xffffffffffffffff) add_key(&(0x7f0000000640)="69785c1fd3", &(0x7f00000006c0)={'syz'}, 0x0, 0x0, r2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f323400c02a3f573a9ce4a0a816d0bcd904ecffffffffffff7f0000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="56007d010000004f0000000000000000000000000000000000000000000000000000000000000000000000000000000001002805007266646e6f05007266646e6f110076626f786e657431747275737465646c6f0000"], 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) truncate(&(0x7f0000000680)='./file0/file1\x00', 0x13f9f977) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x5, 0x20, 0x7fff, 0x7, 0x0, 0x200}) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x1000, @mcast1, 0x1}, r3}}, 0x30) write$P9_RGETATTR(r1, &(0x7f0000000a80)={0xcb5c709d570f5d88, 0x19, 0x1, {0x0, {0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d3bea31b82a799cf5b45349b720dba7357be1fe314132037549479c2e90fed4b1384387bed880f437e9ca47cfcd17187222c27d0aef9c4e0fa1b143f33567477f063cc291f21b5847f5958a6e756e0ed7072c5bf8ad43b0d0d2a8ffd4b058ec843063049d1f09aa223909182e0e80a5bdff674dfd870851210ebf894601e99c5128ac5f79c097f4a5cb105c2088f604349c1315447e34a040d7b107bb91781c2a69f35227111b3c2b0bcb1977f974ab6ffb5dea10963cac81d30281ec0eecc496795e6009ef1e1e326d1828825bbf8635fce31b8d", @ANYRESHEX=r1, @ANYBLOB="00009df8d63f6dd9a7873ba9d9f27e8f7f796b479ba0f74b0e17a539ea6befd9c32ca46dfcb79dde638a47d49608ffbaa882f3f0e33eebc9064d337c708ed13315aea6737bd53d912b2f4a4bbb3f85bca595748cb76f7587716648f1e5f2558fe451854285376660064f389c6699badcd6ea11780a162acc45c08c3463e58cc8291d6562e9596fa9c6"]) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') r4 = syz_open_dev$vcsn(&(0x7f00000009c0)='/dev/vcs#\x00', 0x2, 0x100) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000a40)='team\x00') getsockname$packet(0xffffffffffffff9c, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b80)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c00)=0x14, 0x80000) accept$packet(0xffffffffffffffff, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000e40)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f00000011c0)={@loopback, 0x0}, &(0x7f0000001200)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001280)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000007900)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000007980)={@rand_addr, @dev, 0x0}, &(0x7f00000079c0)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000007a00)={'team0\x00', 0x0}) accept$packet(0xffffffffffffff9c, &(0x7f0000007a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000007a80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000009400)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000009440)={@mcast1, 0x0}, &(0x7f0000009480)=0x14) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000009800)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f00000097c0)={&(0x7f00000094c0)={0x2fc, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0xe8, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1f}}}]}}, {{0x8, 0x1, r8}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x164, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8, 0x1, r15}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}]}}]}, 0x2fc}}, 0x4800) r17 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000940), &(0x7f0000000980)=0xc) 22:26:39 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="0842808bfadadce5b4e99996df1f5d1d3b38e127fcad751f56d6eaf95026d87dca4d3eaf2f136a81e08cc14fd43c788345a46894e5"]) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) r2 = getuid() lstat(&(0x7f00000004c0)='./file0/file1\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x100000, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client='access=client'}, {@cache_fscache='cache=fscache'}, {@posixacl='posixacl'}, {@access_client='access=client'}, {@uname={'uname', 0x3d, 'vmnet1eth0[{'}}, {@cache_mmap='cache=mmap'}], [{@smackfsdef={'smackfsdef', 0x3d, '9p\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, 'wfdno'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x34, 0x76249d65f692d72, 0x77, 0x61, 0x7f, 0x33, 0x61], 0x2d, [0x30, 0x36, 0x34, 0x62], 0x2d, [0x75, 0x35, 0x0, 0x63], 0x2d, [0x35, 0xf2b233774f7b3880, 0x77, 0x7f], 0x2d, [0x77, 0x76, 0x37, 0x77, 0x36, 0x75, 0x7d, 0x33]}}}, {@fowner_gt={'fowner>', r2}}, {@euid_gt={'euid>', r3}}, {@context={'context', 0x3d, 'staff_u'}}]}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000780)={0x0, 0x0, 0x2, 0x0, [], [{0x7f, 0x57, 0x5, 0x1, 0x4, 0x200}, {0x9, 0x81, 0x6, 0x9, 0x7, 0x7ff}], [[], []]}) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 364.350699] 9pnet: Insufficient options for proto=fd 22:26:39 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:39 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 364.401944] 9pnet: Insufficient options for proto=fd 22:26:39 executing program 5: clone(0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000003ffc), &(0x7f0000002000)) waitid(0x0, 0x0, &(0x7f00000000c0), 0xc1000006, 0x0) [ 364.431079] 9pnet: Insufficient options for proto=fd 22:26:39 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0xe9ed, 0x40) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000140)={0x8, 0x3, 0x1, 0x7f, 0x1, 0x6}) r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x4040c0) getpeername$llc(r4, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x3ce) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000040)={0x1fffd, 0x0, 0x0, 0x0, 0x7}) [ 364.477966] 9pnet: Insufficient options for proto=fd [ 364.485950] 9pnet: Insufficient options for proto=fd 22:26:39 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x4000, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f00000000c0)={0x8, 0x0, 0x5, 0x407}) 22:26:39 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xeed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r5 = getpid() fcntl$lock(r4, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r5}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x0, 0x110000}) socket$netlink(0x10, 0x3, 0x4) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000001480)="2e3e360f01c93e0f23450f380091897e66b9800000c00f326635000400000f3066b9670300000f320f01df440f20c0663503000000440f22c0660f370f300fb2a99000", 0x43}], 0x181, 0x0, &(0x7f00000000c0), 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000003c0)=0x5) preadv(r6, &(0x7f0000000480), 0x1000000000000157, 0x4c004800) pipe2(&(0x7f0000000000), 0x84000) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000040)={0x9, 0x5, 0x4000, 0xf7, &(0x7f0000000180)=""/247, 0x1000, &(0x7f0000000480)=""/4096, 0x6c, &(0x7f00000002c0)=""/108}) syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_vs_stats\x00') pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r8, &(0x7f00000001c0)={0x7}, 0x7) r9 = request_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)='md5sum\x00', 0xffffffffffffffff) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, r9) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x0, &(0x7f0000000b80)=ANY=[]) write$P9_RREADDIR(r8, &(0x7f0000000980)=ANY=[], 0x252) dup2(r7, r8) 22:26:39 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000340)='security.ima\x00', &(0x7f0000000600)=@v1={0x2, "d05205992d4b98"}, 0x8, 0x3) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x8) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1, {0x0, {0x84}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:39 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:39 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x2800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:39 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x8431, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 22:26:39 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4, 0x1, 0x9, 0xff, 0x28, r1, 0x5}, 0x2c) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x1, 0x0, {0xa, 0x4e22, 0x17, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}, 0x9}}}, 0x32) ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000040)={0x1fffd}) 22:26:39 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:39 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r0, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000000036573d49a3297443e8"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd[o=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3, 0x400000) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000340)='./file0/file0\x00') 22:26:39 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x4, 0x10}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e24, 0x6, @mcast2, 0x40000000}}}, 0x84) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close(r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x288000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) 22:26:40 executing program 1: r0 = socket$inet6(0xa, 0x80000, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:40 executing program 0: socketpair$unix(0x1, 0x8000000000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f00000001c0)=@ipx, 0x80, &(0x7f0000000800), 0x2bf, &(0x7f0000000440)=""/127, 0x7f}}], 0xf2, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000100), 0x2007ff) [ 365.009022] 9pnet: Insufficient options for proto=fd 22:26:40 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 365.075246] 9pnet: Insufficient options for proto=fd [ 365.200616] 9pnet: Insufficient options for proto=fd 22:26:40 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="16000000760100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x101000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0x20, "3471587882b0e6e90894c49b4c36b1b0937c12692d8e492126a396ffa28a6416"}, &(0x7f0000000600)=0x28) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000900)={r3, @in6={{0xa, 0x4e23, 0xb26}}}, 0x84) 22:26:40 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) r2 = getuid() fstat(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x2, {0xa22, {0x4, 0x4, 0x2}, 0x40, r2, r3, 0x800, 0x401, 0xff, 0x2, 0x100, 0x7fffffff, 0x8, 0x4, 0x8000, 0x800, 0x7fff, 0x0, 0x6, 0x8, 0x8}}, 0xa0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:40 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:40 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000200)=0xe8) mount$9p_xen(&(0x7f0000000080)='vboxnet0wlan1.\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1081841, &(0x7f00000003c0)={'trans=xen,', {[{@fscache='fscache'}, {@loose='loose'}, {@nodevmap='nodevmap'}], [{@context={'context', 0x3d, 'user_u'}}, {@euid_gt={'euid>', r2}}, {@uid_gt={'uid>', r3}}]}}) close(r1) [ 365.415842] 9pnet: Insufficient options for proto=fd 22:26:40 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @local, @local}, &(0x7f0000000500)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@exit]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1}, 0x48) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) 22:26:40 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000640)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) sendto$llc(r3, &(0x7f0000000340)="7f30cc6d83f4340b8879ca1bd21f8eb649c37b20451fdd9c6f62ddc4a01bfba31d88110686d6f419c332f5c735", 0x2d, 0x10, 0x0, 0x0) 22:26:40 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:40 executing program 1: r0 = socket$inet6(0xa, 0x80004, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:40 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x400400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xc7, 0x0, &(0x7f0000000a80)="6026c0c5143865dda7e6e0603c616b9d4e2363e65024d6e4506df798db2ccfb9ac7e87c05b213f66a112d8316ff2afc2e10b82510f5241a27950ef3d5ef4fc2f25fe81ca88ae1287b0ea0432501a4c7556980c9623916d0484f3acb48dd338c128d0fe37b3a476303a5a587dd7166ced60d3765989117a2aee2350d3672fb00bc6940295817908f050de05e24f863c120143d921e670cfe89c29ca2ca14286e0c214eba482e9e66c227f9e0596b147cf66b1854007d1d8693bbf1a09e7823682c0cfb209d89c93", &(0x7f0000000340), 0x7}, 0x28) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 365.626567] 9pnet: Insufficient options for proto=fd 22:26:40 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4, 0x3}, 0x1c) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') r4 = getpgid(0x0) fcntl$lock(r2, 0x7, &(0x7f0000000640)={0x0, 0x2, 0x1ff, 0x1, r4}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x4, 0x200, 0x10001}) 22:26:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000280)="cd", 0x1}], 0x1, &(0x7f0000000a40), 0x0, 0x44}, 0x1) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f00000000c0)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)={0x77359400}) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r2, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") 22:26:41 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:41 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f00000000c0)={0x2}) 22:26:41 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) add_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160300006f010001a826000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:41 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @local, @local}, &(0x7f0000000500)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@exit]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1}, 0x48) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) 22:26:41 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000600)=""/226) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 366.036530] 9pnet: Insufficient options for proto=fd 22:26:41 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:41 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close(r1) 22:26:41 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000600)={0x81, 0x3, 'client0\x00', 0x4, "f5305ea01b497e81", "9e64be4fd54b5a5d5d428cc969afba345514cbdd7762f8583da2b9519a289739", 0x3, 0x1340}) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 366.161827] 9pnet: Insufficient options for proto=fd 22:26:41 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 22:26:41 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 22:26:41 executing program 5: getpgrp(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1}}, 0x0) 22:26:41 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0xa4000, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000900)={0x2000000000000000, 0x0, 0x158, 0x0, 0x14}) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='\x00', 0x8, 0x6, &(0x7f0000000780)=[{&(0x7f00000002c0)="5feb4390e0863a1b49a746849ba28f2646292ae442d76a96e7c6b3acb6ae5b36b3b19db237c8bbea6fceb60b0a4e9695fc8e179680cdf08a057bd1e783016745c8967cc83772989cdee9c3b3334545b6127354d9013c1a247f9eb9bf8d1b12efa26ba9222ebd5cd64560f445638727c00ca6e3e425d9db2cb254c2fae9b60aca972234eb344be255adf1631018fd4c9ee09a4771c7aa9f26a8b4c432f16e376e525fbe5904ffca9acce419e0cf0b2ea0c4cad4cb627d1adef67e683be222d9ce40a3ffb8f8806d", 0xc7, 0xffff}, {&(0x7f00000003c0)="d4c85d5d8f3e6d44b5196f115d719e9f0e242b14193ea12908900a109ab55c1488a489d57bfaa2e2de07f018250954d72e7846ac925f85f1d91c649b07961577dd3574d309b05c84a0465e63cc31b1faeaf56e22ec5d87c5b92b07bad8fe6d834944d6c3a4e3a99f24f9d7e06fad8d1dcf97acd52417fb5315889fc124bac1e0f8d206fe7983a0718dc5d29562a7d598dc6d2c917cab810af88a25180296cc18be1fdf97cbcbf77cc79225b1286b898b01e59f46a3fb0bb547d1bd1f2b1d7ffa0c6033db7f322148f8add940d11df7072699aea86d87f5a12ddec1fb73dc5d934a98", 0xe2, 0x74ce}, {&(0x7f00000004c0)="c90c3a9661f97324a98ab019c084b75e1950966b3cf43441a2309c72eb266fb633e38a0c8234fe29159fbb663aacb897e0e7f866b6ed2d41105e9ed579bf20825f854da9832d1114b69a69b8fa286a41c27fb644829ba81b56afebc7582d4e9232313fd9bc0fdb742b1052fc8e1314b68b3dea7979b46c02ca2bd6344de11888f208172065e7bfe4020c7b06be3d8b7bfca62c9efd6b12eed6d038093d104afdc48221cc3b62e785b49ee918d44a6e37f2ce1cc207516e68e64169d0ab36dbc75ecd80ca5cd2166086b6664a7e9e3000bf", 0xd1, 0x100}, {&(0x7f00000005c0)="103019b940209262479088286a4d17cf0032bb610d8616d40a7b7b72b0e487ac7540e69d4f1786cbfffef4ba9d0c933a554e271530cdf98918e079461e4d00d53d04dcba6d6d69e3e7b89f27287f24f8dd8ed5fb3f6d02d1c32454f4fba9c83b476f2a6c9d26cf4e3a582410f12d0caa2b82ef598e2bb1004a177e4e908e2f9591e721360a", 0x85, 0xff}, {&(0x7f0000000200)="88ad3d801057c2396015050736199f19e270c66b6ba07085552b4c0fa58eceaaa3f333663e5d7ccde5", 0x29, 0xffffffffffffff00}, {&(0x7f0000000680)="83f7d76394cfd4d4a4e5a9fd7173c8aa546ed918e1133b5f57410f6c97e1393f307737179fe9ecb81230293eccf0acfb94d8650fda35e117c4a11f76fa0926db60225e0edd8edcd01ec6eea0360ee69b98d0dadefbe2735a1a9787a2eeee895cc50551c3b45cafb077a70cef5b6692a4ff65ffa0e6e49e8a1fde8b8669040f02e773d93d9c57848bfe80c0e91a58b51d0ec2fce68bed64f048ec7ba75ba06df08b6715cc5c650af75cd3fc61839f6a69253126df7a836299d2c77448563cf9ddfb50352b5838eb96ab10f2733919dfae516cd89524ddb1fcfc4f777b3659251f28a6800df51cea22883b35", 0xeb, 0xfffffffffffffff8}], 0x8800, &(0x7f0000000840)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c757466383d302c73686f72746e616d653d77696e393509887febd8e50dd97375626a5f757365723d2f6465762f736e642f74696d6572002c646566636f6e746578743d756e636f6e66696e65645f752c736d61636b6673726f6f743d002c736d61636b6673726f6f743d2b2173656c6676626f786e65743124757365725d2c00"]) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000080)={{0x0, 0x0, 0x3, 0x3, 0x401}, 0x7, 0x0, 'id1\x00', 'timer0\x00', 0x0, 0xff, 0x0, 0x7ff, 0xfffffffffffffff7}) close(r2) 22:26:41 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg(r2, &(0x7f0000000340)={&(0x7f0000000600)=@nfc_llcp={0x27, 0x0, 0x1, 0x5, 0x6, 0x0, "dc9d0efbda2de5e219bf0a9d6f5b16d411938fb3ada3b3b786064392448a16d4ed7d194f293f7f11a313a0555cbd2c210701938bc5f95c07ae3fd18461f068", 0x1c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000a80)="243acbe4d42c201b2d3b24932f8b2b240fdd2ae8fdf037986a4e17d8448824c44bae5eae1c50e3c32d8062b40961a3f495eae5a6d18cbb6da08ccd0903cb841ca52f6d7c630626fcada56549e8c777f5181b2329b632af40c56e4071fcfec1cf8deee5bce19cec63dc2c32c9633a276b2d5f8fe5ec223517058d33510a5112a56a4130be98a12c977c88b35853d252b99b7ffd3277b8c2df87b00f1a9d26a10ffa9487caca8d7b943af584c9907fee99397e46013c29d55dbaf80f2d7edfd3edbf2322a0192e41f90b81527b9dcf3e8b57b9f199a5", 0xd5}], 0x1, &(0x7f0000000b80)=[{0x38, 0x1ff, 0x2, "686e967361f1c3b70e79455a8bd7d0b74a4c66286efdf6bbfba8f3300b659dd071dd30"}, {0x70, 0x3a, 0x800000, "2380e909b688879ffd28798e15778ccea45b994a83bbf3cfeb5fe0ca0746a241a9654df20ce859186acecb1ec20ec4da7ac1c10c5bda85db1c83591626c11d66a8d3753686e118d99bea50b91aa9bc4f22af90ef68c9fa817932"}, {0x30, 0x115, 0x3, "5e767e434bbe95ca7fbbd48b4b123298a603bc71725a48c5f130116b"}, {0x10, 0x10f, 0x400}], 0xe8, 0x840}, 0x4000) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='5\x00']) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 366.380280] 9pnet: Insufficient options for proto=fd 22:26:41 executing program 0: clone(0x200, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f0000f80000)='./file0\x00', 0x143d, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000600)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = creat(&(0x7f0000000080)="e91f7189591e9233614b00", 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000140), &(0x7f0000001580)) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000001c0)=ANY=[]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000400), &(0x7f0000000b40)) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000240)=""/87) [ 513.928223] INFO: task syz-executor2:15092 blocked for more than 140 seconds. [ 513.935637] Not tainted 4.19.0-rc6+ #264 [ 513.941086] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.949241] syz-executor2 D24936 15092 5396 0x00000004 [ 513.954910] Call Trace: [ 513.957505] __schedule+0x86c/0x1ed0 [ 513.961289] ? __sched_text_start+0x8/0x8 [ 513.966241] ? __follow_mount_rcu.isra.33.part.34+0x38e/0x890 [ 513.972221] ? lockdep_hardirqs_on+0x421/0x5c0 [ 513.976990] ? graph_lock+0x170/0x170 [ 513.980857] ? print_usage_bug+0xc0/0xc0 [ 513.984931] ? d_alloc_cursor+0xe0/0xe0 [ 513.988980] ? find_held_lock+0x36/0x1c0 [ 513.993119] schedule+0xfe/0x460 [ 513.996482] ? __schedule+0x1ed0/0x1ed0 [ 514.000524] ? lockdep_hardirqs_on+0x421/0x5c0 [ 514.005119] ? trace_hardirqs_on+0xbd/0x310 [ 514.009505] ? kasan_check_read+0x11/0x20 [ 514.013667] ? __rwsem_down_write_failed_common+0x8db/0x1670 [ 514.019517] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 514.025017] ? kasan_check_write+0x14/0x20 [ 514.029326] ? do_raw_spin_lock+0xc1/0x200 [ 514.033567] __rwsem_down_write_failed_common+0xbb9/0x1670 [ 514.039271] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 514.044818] ? rwsem_spin_on_owner+0xa30/0xa30 [ 514.049540] ? __lock_acquire+0x7ec/0x4ec0 [ 514.053790] ? mark_held_locks+0x130/0x130 [ 514.058091] ? mark_held_locks+0x130/0x130 [ 514.062339] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 514.067860] ? graph_lock+0x170/0x170 [ 514.072428] ? find_held_lock+0x36/0x1c0 [ 514.076603] ? find_held_lock+0x36/0x1c0 [ 514.080727] ? unlazy_walk+0x1b8/0x550 [ 514.084627] ? lock_downgrade+0x900/0x900 [ 514.088827] ? graph_lock+0x170/0x170 [ 514.092640] ? kasan_check_read+0x11/0x20 [ 514.096774] ? dput.part.26+0x26d/0x790 [ 514.100797] ? shrink_dcache_sb+0x350/0x350 [ 514.105128] ? lockref_get_not_dead+0x70/0x90 [ 514.109694] ? lock_acquire+0x1ed/0x520 [ 514.113683] ? lock_rename+0x236/0x290 [ 514.117560] ? lock_release+0x970/0x970 [ 514.121584] ? arch_local_save_flags+0x40/0x40 [ 514.126174] rwsem_down_write_failed+0xe/0x10 [ 514.130758] ? rwsem_down_write_failed+0xe/0x10 [ 514.135445] call_rwsem_down_write_failed+0x17/0x30 [ 514.140525] down_write_nested+0xa9/0x130 [ 514.144690] ? lock_rename+0x236/0x290 [ 514.148678] ? _down_write_nest_lock+0x130/0x130 [ 514.153454] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 514.159044] ? __sb_start_write+0x1b2/0x370 [ 514.163373] lock_rename+0x236/0x290 [ 514.167072] do_renameat2+0x696/0x1180 [ 514.171116] ? user_path_create+0x40/0x40 [ 514.175292] ? kasan_check_read+0x11/0x20 [ 514.179503] ? _copy_to_user+0xc8/0x110 [ 514.183813] ? put_timespec64+0x10f/0x1b0 [ 514.188496] ? nsecs_to_jiffies+0x30/0x30 [ 514.192689] ? do_syscall_64+0x9a/0x820 [ 514.196651] ? do_syscall_64+0x9a/0x820 [ 514.201371] ? trace_hardirqs_on+0xbd/0x310 [ 514.205686] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 514.211281] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 514.216747] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 514.222270] __x64_sys_rename+0x5e/0x80 [ 514.227072] do_syscall_64+0x1b9/0x820 [ 514.231023] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 514.236394] ? syscall_return_slowpath+0x5e0/0x5e0 [ 514.241562] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 514.246522] ? trace_hardirqs_on_caller+0x310/0x310 [ 514.251632] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 514.256662] ? prepare_exit_to_usermode+0x291/0x3b0 [ 514.261849] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 514.266711] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 514.271955] RIP: 0033:0x457579 [ 514.275155] Code: 24 08 48 89 01 e8 d7 2d fc ff e8 22 7a fc ff b8 02 00 00 00 48 8d 0d 6a 60 09 01 87 01 8b 05 62 60 09 01 83 f8 01 0f 85 8a 00 <00> 00 b8 01 00 00 00 88 05 9e 65 09 01 84 c0 74 72 b8 01 00 00 00 [ 514.294128] RSP: 002b:00007fe586f04c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 514.301878] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457579 [ 514.309212] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 514.316586] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 514.323930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe586f056d4 [ 514.332315] R13: 00000000004c3295 R14: 00000000004d4e78 R15: 00000000ffffffff [ 514.339718] INFO: task syz-executor2:15093 blocked for more than 140 seconds. [ 514.347009] Not tainted 4.19.0-rc6+ #264 [ 514.351658] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.359672] syz-executor2 D23528 15093 5396 0x00000004 [ 514.365300] Call Trace: [ 514.367875] __schedule+0x86c/0x1ed0 [ 514.371640] ? __lock_acquire+0x7ec/0x4ec0 [ 514.375880] ? __sched_text_start+0x8/0x8 [ 514.380089] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 514.385429] ? graph_lock+0x170/0x170 [ 514.389314] ? print_usage_bug+0xc0/0xc0 [ 514.393391] ? print_usage_bug+0xc0/0xc0 [ 514.397444] ? __call_rcu.constprop.69+0x373/0xbc0 [ 514.402446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 514.408030] ? find_held_lock+0x36/0x1c0 [ 514.412087] schedule+0xfe/0x460 [ 514.415443] ? __schedule+0x1ed0/0x1ed0 [ 514.419499] ? lockdep_hardirqs_on+0x421/0x5c0 [ 514.424093] ? trace_hardirqs_on+0xbd/0x310 [ 514.428472] ? kasan_check_read+0x11/0x20 [ 514.432625] ? __rwsem_down_write_failed_common+0x8db/0x1670 [ 514.438488] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 514.443955] ? kasan_check_write+0x14/0x20 [ 514.448670] ? do_raw_spin_lock+0xc1/0x200 [ 514.453437] __rwsem_down_write_failed_common+0xbb9/0x1670 [ 514.460471] ? rwsem_spin_on_owner+0xa30/0xa30 [ 514.465058] ? mark_held_locks+0x130/0x130 [ 514.469385] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 514.474938] ? check_preemption_disabled+0x48/0x200 [ 514.480007] ? free_unref_page+0x6e0/0x960 [ 514.484267] ? free_unref_page+0x6e0/0x960 [ 514.488593] ? lockdep_hardirqs_on+0x421/0x5c0 [ 514.493183] ? trace_hardirqs_on+0xbd/0x310 [ 514.497491] ? __free_pages+0x10a/0x190 [ 514.501518] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 514.506976] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 514.512593] ? mark_free_pages+0x3c0/0x3c0 [ 514.516841] ? graph_lock+0x170/0x170 [ 514.520696] ? graph_lock+0x170/0x170 [ 514.524504] ? mount_fs+0x1d7/0x31d [ 514.528181] ? lock_downgrade+0x900/0x900 [ 514.532344] ? lock_acquire+0x1ed/0x520 [ 514.536307] ? lock_mount+0x8c/0x2e0 [ 514.540101] ? lock_release+0x970/0x970 [ 514.544129] ? arch_local_save_flags+0x40/0x40 [ 514.548789] rwsem_down_write_failed+0xe/0x10 [ 514.553287] ? rwsem_down_write_failed+0xe/0x10 [ 514.557940] call_rwsem_down_write_failed+0x17/0x30 [ 514.563043] down_write+0xa5/0x130 [ 514.566588] ? lock_mount+0x8c/0x2e0 [ 514.570351] ? down_read+0x1d0/0x1d0 [ 514.574083] ? _raw_spin_unlock+0x2c/0x50 [ 514.578361] lock_mount+0x8c/0x2e0 [ 514.581914] ? may_umount+0xb0/0xb0 [ 514.585526] do_add_mount+0x27/0x370 [ 514.589992] do_mount+0x19cd/0x31f0 [ 514.593616] ? copy_mount_string+0x40/0x40 [ 514.597840] ? copy_mount_options+0x5f/0x380 [ 514.602332] ? rcu_read_lock_sched_held+0x108/0x120 [ 514.607368] ? kmem_cache_alloc_trace+0x353/0x750 [ 514.612279] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 514.617823] ? _copy_from_user+0xdf/0x150 [ 514.622044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 514.628704] ? copy_mount_options+0x288/0x380 [ 514.633302] ksys_mount+0x12d/0x140 [ 514.636918] __x64_sys_mount+0xbe/0x150 [ 514.640966] do_syscall_64+0x1b9/0x820 [ 514.644864] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 514.650287] ? syscall_return_slowpath+0x5e0/0x5e0 [ 514.655226] ? trace_hardirqs_on_caller+0x310/0x310 [ 514.660299] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 514.665317] ? recalc_sigpending_tsk+0x180/0x180 [ 514.670142] ? kasan_check_write+0x14/0x20 [ 514.674394] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 514.679575] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 514.684768] RIP: 0033:0x457579 [ 514.688239] Code: 24 08 48 89 01 e8 d7 2d fc ff e8 22 7a fc ff b8 02 00 00 00 48 8d 0d 6a 60 09 01 87 01 8b 05 62 60 09 01 83 f8 01 0f 85 8a 00 <00> 00 b8 01 00 00 00 88 05 9e 65 09 01 84 c0 74 72 b8 01 00 00 00 [ 514.707210] RSP: 002b:00007fe586ee3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 514.715038] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457579 [ 514.722941] RDX: 00000000200008c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 514.730463] RBP: 000000000072c040 R08: 0000000020000300 R09: 0000000000000000 [ 514.737828] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe586ee46d4 [ 514.745153] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 00000000ffffffff [ 514.752481] [ 514.752481] Showing all locks held in the system: [ 514.758883] 1 lock held by khungtaskd/982: [ 514.763116] #0: 00000000d0372acf (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424 [ 514.771806] 1 lock held by rsyslogd/5241: [ 514.775954] #0: 0000000095d91d21 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 514.784154] 2 locks held by getty/5331: [ 514.788369] #0: 000000007bff3f01 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 514.796610] #1: 0000000024aba8be (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 514.805594] 2 locks held by getty/5332: [ 514.809599] #0: 000000003f43ac37 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 514.817945] #1: 000000006ff2f554 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 514.826897] 2 locks held by getty/5333: [ 514.830919] #0: 00000000d23f895b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 514.839280] #1: 00000000135806b2 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 514.849098] 2 locks held by getty/5334: [ 514.853074] #0: 00000000b39dfc92 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 514.861389] #1: 000000005f934688 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 514.870325] 2 locks held by getty/5335: [ 514.874283] #0: 000000008566c951 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 514.882614] #1: 000000006c88bd9d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 514.891543] 2 locks held by getty/5336: [ 514.895501] #0: 00000000b17196f8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 514.903796] #1: 000000009eda236b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 514.912766] 2 locks held by getty/5337: [ 514.916740] #0: 00000000193c40f8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 514.925034] #1: 00000000034ed1ac (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 514.934082] 2 locks held by syz-executor2/15030: [ 514.938896] #0: 00000000be893c1c (sb_writers#19){.+.+}, at: mnt_want_write+0x3f/0xc0 [ 514.946919] #1: 0000000022860ca3 (&sb->s_type->i_mutex_key#26/1){+.+.}, at: lock_rename+0x236/0x290 [ 514.956295] 2 locks held by syz-executor2/15092: [ 514.961079] #0: 00000000be893c1c (sb_writers#19){.+.+}, at: mnt_want_write+0x3f/0xc0 [ 514.969253] #1: 0000000022860ca3 (&sb->s_type->i_mutex_key#26/1){+.+.}, at: lock_rename+0x236/0x290 [ 514.979113] 1 lock held by syz-executor2/15093: [ 514.983772] #0: 0000000022860ca3 (&sb->s_type->i_mutex_key#26){++++}, at: lock_mount+0x8c/0x2e0 [ 514.992792] [ 514.994418] ============================================= [ 514.994418] [ 515.001470] NMI backtrace for cpu 1 [ 515.005102] CPU: 1 PID: 982 Comm: khungtaskd Not tainted 4.19.0-rc6+ #264 [ 515.012011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.021348] Call Trace: [ 515.024006] dump_stack+0x1c4/0x2b4 [ 515.027632] ? dump_stack_print_info.cold.2+0x52/0x52 [ 515.032816] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 515.038348] nmi_cpu_backtrace.cold.3+0x63/0xa2 [ 515.043080] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 515.048268] nmi_trigger_cpumask_backtrace+0x1b3/0x1ed [ 515.053674] arch_trigger_cpumask_backtrace+0x14/0x20 [ 515.058855] watchdog+0xb3e/0x1050 [ 515.062396] ? reset_hung_task_detector+0xd0/0xd0 [ 515.067418] ? __kthread_parkme+0xce/0x1a0 [ 515.071640] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 515.076735] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 515.081825] ? lockdep_hardirqs_on+0x421/0x5c0 [ 515.086402] ? trace_hardirqs_on+0xbd/0x310 [ 515.090708] ? kasan_check_read+0x11/0x20 [ 515.094838] ? __kthread_parkme+0xce/0x1a0 [ 515.099057] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 515.104490] ? kasan_check_write+0x14/0x20 [ 515.108709] ? do_raw_spin_lock+0xc1/0x200 [ 515.112929] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 515.118029] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 515.123564] ? __kthread_parkme+0xfb/0x1a0 [ 515.127936] kthread+0x35a/0x420 [ 515.131289] ? reset_hung_task_detector+0xd0/0xd0 [ 515.136114] ? kthread_bind+0x40/0x40 [ 515.139899] ret_from_fork+0x3a/0x50 [ 515.143767] Sending NMI from CPU 1 to CPUs 0: [ 515.150203] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.551 msecs [ 515.150354] NMI backtrace for cpu 0 [ 515.150361] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.19.0-rc6+ #264 [ 515.150368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.150373] RIP: 0010:__lock_is_held+0xad/0x140 [ 515.150386] Code: 00 41 83 c7 01 84 c0 74 08 3c 03 0f 8e 8f 00 00 00 45 39 bc 24 78 08 00 00 7e 66 49 63 c7 48 8b 75 d0 48 8d 04 80 49 8d 1c c6 <48> 89 df e8 bb f4 ff ff 85 c0 74 c6 83 7d c4 ff b8 01 00 00 00 74 [ 515.150392] RSP: 0018:ffff8801dae07088 EFLAGS: 00000002 [ 515.150401] RAX: 0000000000000000 RBX: ffffffff892776c0 RCX: ffffffff896fe5c0 [ 515.150408] RDX: 1ffffffff124eed7 RSI: ffff8801daf2cb58 RDI: ffff8801daf2cb58 [ 515.150414] RBP: ffff8801dae070c8 R08: 00000000000000fb R09: ffff8801daf2d6d8 [ 515.150421] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff89276e40 [ 515.150427] R13: fffffbfff124eed7 R14: ffffffff892776c0 R15: 0000000000000000 [ 515.150434] FS: 0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 515.150440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 515.150446] CR2: ffffffffff600400 CR3: 00000001be55d000 CR4: 00000000001406f0 [ 515.150452] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 515.150458] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 515.150462] Call Trace: [ 515.150465] [ 515.150470] lock_is_held_type+0x118/0x210 [ 515.150474] can_migrate_task+0x40b/0x12d0 [ 515.150479] ? update_dl_rq_load_avg+0x840/0x840 [ 515.150483] ? set_next_entity+0xc40/0xc40 [ 515.150488] load_balance+0xe06/0x3430 [ 515.150492] ? find_held_lock+0x36/0x1c0 [ 515.150497] ? update_blocked_averages+0x1013/0x1e00 [ 515.150502] ? find_busiest_group+0x1d20/0x1d20 [ 515.150507] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 515.150511] ? lock_repin_lock+0x430/0x430 [ 515.150516] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 515.150521] ? rq_online_fair+0x4d0/0x4d0 [ 515.150525] ? graph_lock+0x170/0x170 [ 515.150529] ? graph_lock+0x170/0x170 [ 515.150534] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 515.150539] ? check_preemption_disabled+0x48/0x200 [ 515.150544] ? check_preemption_disabled+0x48/0x200 [ 515.150548] ? __lock_is_held+0xb5/0x140 [ 515.150553] rebalance_domains+0x845/0xdc0 [ 515.150558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 515.150563] ? load_balance+0x3430/0x3430 [ 515.150567] ? __lock_acquire+0x7ec/0x4ec0 [ 515.150572] ? rcu_read_lock_sched_held+0x108/0x120 [ 515.150577] ? rcu_process_callbacks+0x16b8/0x2670 [ 515.150582] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 515.150586] ? find_next_bit+0x104/0x130 [ 515.150591] _nohz_idle_balance+0x621/0x7a0 [ 515.150595] ? rebalance_domains+0xdc0/0xdc0 [ 515.150599] ? find_held_lock+0x36/0x1c0 [ 515.150604] ? __lock_acquire+0x7ec/0x4ec0 [ 515.150609] ? rebalance_domains+0x358/0xdc0 [ 515.150613] ? check_preemption_disabled+0x48/0x200 [ 515.150617] ? graph_lock+0x170/0x170 [ 515.150623] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 515.150628] ? check_preemption_disabled+0x48/0x200 [ 515.150632] run_rebalance_domains+0x2ec/0x500 [ 515.150643] ? _nohz_idle_balance+0x7a0/0x7a0 [ 515.150648] ? rcu_pm_notify+0xc0/0xc0 [ 515.150652] __do_softirq+0x30b/0xad8 [ 515.150657] ? __irqentry_text_end+0x1f9618/0x1f9618 [ 515.150661] ? pvclock_read_flags+0x160/0x160 [ 515.150667] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 515.150672] ? check_preemption_disabled+0x48/0x200 [ 515.150676] ? kvm_clock_read+0x18/0x30 [ 515.150681] ? kvm_sched_clock_read+0x9/0x20 [ 515.150686] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 515.150691] ? check_preemption_disabled+0x48/0x200 [ 515.150695] irq_exit+0x17f/0x1c0 [ 515.150699] scheduler_ipi+0x55a/0xad0 [ 515.150703] ? migration_cpu_stop+0x6a0/0x6a0 [ 515.150708] ? kasan_check_write+0x14/0x20 [ 515.150713] ? rcu_dynticks_eqs_enter+0x4c/0x70 [ 515.150717] ? rcu_nmi_exit+0x1f8/0x280 [ 515.150721] ? rcu_idle_enter+0x4b0/0x4b0 [ 515.150725] ? kvm_clock_read+0x18/0x30 [ 515.150730] ? kvm_sched_clock_read+0x9/0x20 [ 515.150734] ? sched_clock+0x31/0x40 [ 515.150739] ? sched_clock_cpu+0x1b/0x1b0 [ 515.150744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 515.150749] ? check_preemption_disabled+0x48/0x200 [ 515.150754] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 515.150759] ? check_preemption_disabled+0x48/0x200 [ 515.150764] smp_reschedule_interrupt+0x109/0x650 [ 515.150769] ? smp_thermal_interrupt+0x850/0x850 [ 515.150773] ? interrupt_entry+0xb5/0xf0 [ 515.150778] ? trace_hardirqs_off_caller+0xbb/0x310 [ 515.150783] ? trace_hardirqs_off_caller+0xbb/0x310 [ 515.150788] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 515.150793] ? trace_hardirqs_on_caller+0x310/0x310 [ 515.150798] ? trace_hardirqs_on_caller+0x310/0x310 [ 515.150803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 515.150808] ? check_preemption_disabled+0x48/0x200 [ 515.150813] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 515.150818] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 515.150822] reschedule_interrupt+0xf/0x20 [ 515.150826] [ 515.150830] RIP: 0010:native_safe_halt+0x6/0x10 [ 515.150844] Code: e9 2c ff ff ff 48 89 c7 48 89 45 d8 e8 13 28 12 fa 48 8b 45 d8 e9 ca fe ff ff 48 89 df e8 02 28 12 fa eb 82 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 90 90 90 90 90 [ 515.150849] RSP: 0018:ffffffff89207bb8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff02 [ 515.150860] RAX: dffffc0000000000 RBX: 1ffffffff1240f7b RCX: 0000000000000000 [ 515.150866] RDX: 1ffffffff1263e44 RSI: 0000000000000001 RDI: ffffffff8931f220 [ 515.150872] RBP: ffffffff89207bb8 R08: ffffffff89276e40 R09: 0000000000000000 [ 515.150879] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff89207c78 [ 515.150885] R13: ffffffff89f3c0e0 R14: 0000000000000000 R15: 0000000000000000 [ 515.150889] default_idle+0xbf/0x490 [ 515.150893] ? rcu_dynticks_eqs_enter+0x4c/0x70 [ 515.150898] ? __sched_text_end+0x1/0x1 [ 515.150902] ? rcu_idle_enter+0x329/0x4b0 [ 515.150907] ? rcu_eqs_special_set+0x1b0/0x1b0 [ 515.150912] ? tsc_verify_tsc_adjust+0x137/0x460 [ 515.150917] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 515.150922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 515.150927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 515.150933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 515.150937] arch_cpu_idle+0x10/0x20 [ 515.150941] default_idle_call+0x6d/0x90 [ 515.150945] do_idle+0x3db/0x5b0 [ 515.150949] ? retint_kernel+0x2d/0x2d [ 515.150954] ? arch_cpu_idle_exit+0x70/0x70 [ 515.150958] cpu_startup_entry+0x10c/0x120 [ 515.150962] ? cpu_in_idle+0x20/0x20 [ 515.150966] rest_init+0xe2/0xe5 [ 515.150970] start_kernel+0x8f4/0x92f [ 515.150975] ? mem_encrypt_init+0xb/0xb [ 515.150980] ? early_idt_handler_common+0x3b/0x60 [ 515.150985] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 515.150989] ? x86_family+0x3e/0x50 [ 515.150994] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 515.150999] x86_64_start_reservations+0x29/0x2b [ 515.151004] x86_64_start_kernel+0x76/0x79 [ 515.151008] secondary_startup_64+0xa4/0xb0 [ 515.151903] Kernel panic - not syncing: hung_task: blocked tasks [ 515.825440] CPU: 1 PID: 982 Comm: khungtaskd Not tainted 4.19.0-rc6+ #264 [ 515.832354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.841789] Call Trace: [ 515.844379] dump_stack+0x1c4/0x2b4 [ 515.847998] ? dump_stack_print_info.cold.2+0x52/0x52 [ 515.853192] panic+0x238/0x4e7 [ 515.856383] ? add_taint.cold.5+0x16/0x16 [ 515.860525] ? nmi_trigger_cpumask_backtrace+0x16a/0x1ed [ 515.865959] ? nmi_trigger_cpumask_backtrace+0x1c4/0x1ed [ 515.871393] ? nmi_trigger_cpumask_backtrace+0x173/0x1ed [ 515.876827] ? nmi_trigger_cpumask_backtrace+0x16a/0x1ed [ 515.882376] watchdog+0xb4f/0x1050 [ 515.886020] ? reset_hung_task_detector+0xd0/0xd0 [ 515.891352] ? __kthread_parkme+0xce/0x1a0 [ 515.895708] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 515.900804] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 515.905896] ? lockdep_hardirqs_on+0x421/0x5c0 [ 515.910470] ? trace_hardirqs_on+0xbd/0x310 [ 515.914776] ? kasan_check_read+0x11/0x20 [ 515.918912] ? __kthread_parkme+0xce/0x1a0 [ 515.923132] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 515.938648] ? kasan_check_write+0x14/0x20 [ 515.942871] ? do_raw_spin_lock+0xc1/0x200 [ 515.947107] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 515.952197] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 515.957717] ? __kthread_parkme+0xfb/0x1a0 [ 515.961936] kthread+0x35a/0x420 [ 515.965287] ? reset_hung_task_detector+0xd0/0xd0 [ 515.970110] ? kthread_bind+0x40/0x40 [ 515.973900] ret_from_fork+0x3a/0x50 [ 515.978620] Kernel Offset: disabled [ 515.982251] Rebooting in 86400 seconds..