setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10)
unshare(0x4010000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0x0, 0x4008000, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:22:53 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xe9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="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", 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x10)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

22:22:53 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:53 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x34000, 0x0, 0x14081008}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fffeff0100000000000000110800000100000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)

22:22:53 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_getres(0xdfeffefffffffff0, &(0x7f0000000040))
recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1, &(0x7f00000017c0)=""/116, 0x74}}], 0x4000000000001cd, 0x0, &(0x7f0000004a40))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00')
preadv(r1, &(0x7f0000000140), 0x391, 0x51)

22:22:53 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x400140, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000100)={0xadb}, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x32717efc19ca51b5)
sendto$inet(r1, &(0x7f0000000140)="caa969fef24ef584e9", 0x9, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:22:53 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r2 = syz_open_pts(r0, 0x0)
read(r2, &(0x7f00000000c0)=""/1, 0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc))
r3 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000140))
syz_open_pts(r0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40200, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1)

22:22:53 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

22:22:53 executing program 7:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
getpeername$packet(r0, &(0x7f0000000280)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000140), 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=@ipv6_newaddr={0x5c, 0x14, 0x818, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x100, 0xff, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x1, 0xfffffffffffffffb, 0x4, 0x5}}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_LOCAL={0x14}, @IFA_FLAGS={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
r2 = socket$inet6(0xa, 0x3, 0x88)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
write$P9_RXATTRCREATE(r3, &(0x7f0000000200)={0x7, 0x21, 0x1}, 0x7)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000001c0)={0x9, 0xffffffffffffffe1, 0xa063, 0x6, 0x95a, 0x5})
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e21, 0x3, @ipv4={[], [], @multicast2}, 0x8}}, 0x0, 0x2, 0x200, "aaed1553ef6f618420306550a87e91275e3498d0ebe94501cea96e2a1391eb4e64df9accc22d677b4c2ba653c458e5b502fd4539dffaa54fc62f574185573b7a313e45ce6f3e229f61c24ebedc2ecfb6"}, 0xd8)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)
geteuid()
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@mcast2, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8)

22:22:53 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
recvfrom(r0, &(0x7f0000000000)=""/34, 0xffffff88, 0x140, &(0x7f0000000040)=@ethernet={0x6, @remote}, 0x80)
setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f00000000c0), 0x4)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000140), 0x3)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x408040, 0x0)
r2 = fcntl$getown(r0, 0x9)
ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000180)=r2)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0))

22:22:53 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0xd)
ftruncate(r0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f00000000c0)="a459944426788fa8127846c5357d5b30a43046c6b8abdba0d7f24d908f302f1149c0e57748d26040fcb1a3d58ece34feff4a35688b96cd3ca8a53d6e067063", 0x3f, 0x8890, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10)

22:22:53 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

22:22:54 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000001c0)={0x1, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e24, @broadcast}}}, 0x108)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000140))

22:22:54 executing program 0:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x402000, 0x0)
ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f00000002c0)=""/191)
setitimer(0x3, &(0x7f0000000100)={{0x0, 0x2710}}, &(0x7f00000000c0))

22:22:54 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

22:22:54 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb)
close(r0)
execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400), &(0x7f0000000140))
syz_mount_image$iso9660(&(0x7f0000000280)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x186, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000500)="990f62d0589aca9cc618082ef2f5602264e2831c578ade37b3969449344d1ce3038fc644a0942072bdbd380c6fa6a11a68fd320dfd6205599cd12bbb0259a6c2", 0x40, 0x1}], 0x40, &(0x7f0000000640))
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000100000000000004b000000584ecd703035dca603c8266238be6852a9b7e67cd757e5c7d1275d4cf325c5e74ac48dad8c0000006271060ad96fe7fc07f62698328bdb2ae230b846e73e0fbb550581699a3cf44d119560e1f06dfff59b056e31f7a13a6eaab6b60018667ac1d432b499ac98bcfeb2aa5c393caa254544179281c3b2bad6fffe000000000000"], &(0x7f0000000140)=0x1)
write$P9_RSTATFS(r0, &(0x7f00000002c0)={0x43, 0x9, 0x2, {0x6, 0x4, 0x0, 0x4, 0x1, 0x9, 0x3f, 0xf84, 0x8}}, 0x43)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0)
syz_read_part_table(0xffffffff00000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000000), 0x0, 0x1a0}])

22:22:54 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:54 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)="70726f6a69645f6d617000c6cdcf73238a5868159c60af2878ac14d7941dd32f27752aee399b70f4b8a97f874b6f7b15e46dfbdbcf4127d2c7bcf8136dbe4afbf959acb9d517840db9ea6470fbedd30e28b0f0f245f698e2b26a9b674d")
writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000980)='R', 0x1}], 0x1)
ioctl$KDDELIO(r0, 0x4b35, 0x401)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0xfffffffffffffe01, 0x5, 0x1, 0x642743a0, 0x401, 0x3e, 0x4}, 0x1c)

22:22:54 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x400800, 0x0)
ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000100)=0x1f)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:22:54 executing program 4:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000140)={'nat\x00', 0xb4, "b94a7c6f3a308fb85ef7ddea9ba1bf89e9bf6dcd712486e77e1553bebdc56d9bd549cb044bc5216f7b72b2d025e5c0b95a39f32a3a9a72befe6ad3e01f2bb84120e89322b338794dac2169e6c47a41a7d5a78c70157e8b175e9b9a1261dfa2e777e291aa354c30ab82e3bf2b49ea91e9c8dfa185ccdb3f8246ed4f7200211df6f24eed33256f798cf168e05b3a598d62da0e83fe4ccdc6eeb5396c6f23c9b96a97e59203658920e77ec8ee5beae00cdbfdd1ec3a"}, &(0x7f00000000c0)=0xd8)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x28, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user'}, {@nodevmap='nodevmap'}, {@nodevmap='nodevmap'}, {@aname={'aname'}}]}})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

22:22:54 executing program 0:
r0 = socket$inet(0x2, 0x2, 0xfff)
bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c)
setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4)
sendto$inet(r0, &(0x7f0000000240)='X', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x8004e20}, 0x10)
ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f0000000300), 0x8)

22:22:54 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:54 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r2 = syz_open_pts(r0, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xff, 0x1, 0x8000000000000, 0x8000, 0x2, 0x542, 0x8, 0x8000, 0x5, 0x100})
read(r2, &(0x7f00000000c0)=""/1, 0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc))
r3 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000140))
syz_open_pts(r0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

22:22:54 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0))
mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={<r1=>0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0x0)
rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00')
r3 = syz_open_procfs(r1, &(0x7f00000000c0)='net/rpc\x00')
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000100))

22:22:54 executing program 0:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20504}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000230010002dbd7000ffdbdf251a0000003c5581a4ffdf7e7039e9824dcc00009687fe0821f1ded9d08e297bddfe975742782f8942c37efae190138d47374533b7b506912902232f0618724c1ddbdfde20780d0000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4)
write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xfffffc47)

22:22:54 executing program 5:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0)
ioctl$sock_proto_private(r0, 0x89ee, &(0x7f0000000240)="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")
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
recvfrom(r1, &(0x7f00000000c0)=""/177, 0xb1, 0x40000000, &(0x7f0000000180)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80)
sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:22:54 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:54 executing program 7:
r0 = inotify_init()
write$P9_RWRITE(r0, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x6}, 0xb)

22:22:55 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)="9dd3e38b7f053a939a20edaae8f73d2f78726f632f342f76732f636f6e6e74726163fdcd8dcc90ebf3bab3bf4770f01e882bb4acad7e8fa2d429a4c5917c280db483fd5f7ae74e61f54f24083a5645ef5538d4e0d54769f25c5f881e148bd7cd00000000000000000000", 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8000000000000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/154)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000540))

22:22:55 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:55 executing program 7:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200000, 0x0)
ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000540)=""/4096)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000080)=[@free_buffer, @clear_death], 0x0, 0x0, &(0x7f0000000140)})

22:22:55 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)="6d747300000000000000000000005299aeb6ef1d5a46ba5c7acae9ce33835ed8825c497b72e75893a8e6f5ee617a60cf76883bc7466e70dd8249e27dd4c2aed22a17fe5aede0313cc36a18173e0879a8e82d993048ed519ce0b120c026bed5e5c4c63196e24b9f75fae156bd7aa06755aeacc26204bb138cc8677a2c653a0c4ba867aeeae552c2d91b558bea29052b5416f1a4c55d8e7968dcfa30d1fa692260c7fb3d7b12260c85163c79284092d87232238d4951489f823807f389edfa016df60d4b2b208782b48a4e660cba952a2a99b6d5891794c6ae12500cb6971acd2cbb68619d87ad11", 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x100000000, 0x9e37})
ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0x100000000, 0xfffffffffffffffc})

22:22:55 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
munlockall()
ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
getpeername$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000180)={0x9, 0xff, 0x7f, 0x1, 0x632d, 0x9, 0x0, 0x101, 0x2, 0x4, 0x9, 0xffffffffffff623f})
signalfd(r1, &(0x7f00000002c0)={0x7}, 0x8)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={@loopback, @remote, @loopback, 0xffff, 0x3, 0x200, 0x500, 0xffff, 0x900241, r2})
r3 = syz_open_pts(r0, 0x2)
read(r3, &(0x7f00000000c0)=""/1, 0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000fd0ffc))
r4 = gettid()
ioctl$TIOCSTI(r0, 0x5412, 0x20)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000140))
r5 = syz_open_pts(r0, 0x0)
r6 = fcntl$dupfd(r5, 0x406, r5)
ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r4, 0x1000000000016)

22:22:55 executing program 6:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:55 executing program 3:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4)
write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="89443fa19a2994ca3192d5c6a2d87e14d1abd30f15ea96a0b1982615c96bd88ef5ea7166f80ed0bf061b97993c7c23d0e6c85656af19adc504fcba92ab85d90587df09ed7a6fff0428f69ef3dc2d1da2a10a344c9da161088e956cebcdeb4f66e835e1007c634b2d1f18282ebdc78896f0cfca086835352b8468b10265c3f3533b4d185a4208e8"], 0x1)
recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000100), 0x1000000000000113, &(0x7f0000002b80)=""/62, 0xa4}}], 0x5e2, 0x0, 0x0)

[  577.163890] binder: 12079:12082 BC_FREE_BUFFER u0000000000000000 no match
[  577.171501] binder: 12079:12082 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  577.188266] binder: 12079:12088 BC_FREE_BUFFER u0000000000000000 no match
[  577.196628] binder: 12079:12088 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
22:22:55 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)
ioctl$VT_DISALLOCATE(r3, 0x5608)

22:22:55 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r2 = syz_open_pts(r0, 0x400000)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc))
r3 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000140))
syz_open_pts(r0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

22:22:55 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x4)
ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070")
r1 = socket$inet6(0xa, 0x1000000000002, 0x800000000000)
getsockopt$sock_buf(r1, 0x1, 0x20048000000000e, &(0x7f0000b56f40)=""/192, &(0x7f0000000040)=0xc0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'ip6tnl0\x00', {0x2, 0x4e23, @multicast1}})

22:22:55 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000001040), 0x4)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000314000/0x4000)=nil, 0x4000, 0x4)
keyctl$set_reqkey_keyring(0xe, 0x1)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000140))
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0)
recvmmsg(r0, &(0x7f00000022c0)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/136, 0x88}, {&(0x7f0000000280)=""/188, 0xbc}], 0x2, 0x0, 0x0, 0xab07}, 0x3}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000340)=""/197, 0xc5}, {&(0x7f0000000100)=""/16, 0x10}, {&(0x7f0000000440)=""/93, 0x5d}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000680)=""/129, 0x81}, {&(0x7f0000000740)=""/7, 0x7}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/37, 0x25}, {&(0x7f00000008c0)=""/220, 0xdc}], 0xa, &(0x7f0000000a80)=""/250, 0xfa, 0x1}, 0x100}, {{&(0x7f0000000b80)=@xdp, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000c00)=""/2, 0x2}], 0x1, &(0x7f0000000c80)=""/84, 0x54, 0x8}, 0xff}, {{&(0x7f0000000d00)=@ipx, 0x80, &(0x7f0000001100)=[{&(0x7f0000000d80)=""/161, 0xa1}, {&(0x7f0000000e40)=""/202, 0xca}, {&(0x7f0000000f40)=""/40, 0x28}, {&(0x7f0000000f80)=""/1, 0x1}, {&(0x7f0000000fc0)=""/2, 0x2}, {&(0x7f0000001000)=""/50, 0x32}, {&(0x7f0000001040)}, {&(0x7f0000001080)=""/123, 0x7b}], 0x8, &(0x7f0000001180)=""/30, 0x1e, 0x2}}, {{&(0x7f00000011c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001240)=""/209, 0xd1}, {&(0x7f0000001340)=""/235, 0xeb}, {&(0x7f0000001440)=""/148, 0x94}, {&(0x7f0000001500)=""/33, 0x21}, {&(0x7f0000001540)=""/128, 0x80}, {&(0x7f00000015c0)=""/242, 0xf2}], 0x6, &(0x7f0000001740)=""/63, 0x3f, 0x6e}, 0x3}, {{&(0x7f0000001780)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001800)=""/202, 0xca}, {&(0x7f0000001900)=""/213, 0xd5}], 0x2, &(0x7f0000001a40)=""/229, 0xe5, 0xb632bf}, 0x320f}, {{&(0x7f0000001b40)=@ax25, 0x80, &(0x7f0000002140)=[{&(0x7f0000001bc0)=""/8, 0x8}, {&(0x7f0000001c00)=""/83, 0x53}, {&(0x7f0000001c80)=""/118, 0x76}, {&(0x7f0000001d00)=""/82, 0x52}, {&(0x7f0000001d80)=""/214, 0xd6}, {&(0x7f0000001e80)=""/160, 0xa0}, {&(0x7f0000001f40)=""/26, 0x1a}, {&(0x7f0000001f80)=""/119, 0x77}, {&(0x7f0000002000)=""/71, 0x47}, {&(0x7f0000002080)=""/151, 0x97}], 0xa, &(0x7f0000002200)=""/171, 0xab, 0x8}, 0x800}], 0x7, 0x10100, &(0x7f0000002480)={0x0, 0x1c9c380})

22:22:55 executing program 6:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

[  577.313698] sock: process `syz-executor7' is using obsolete getsockopt SO_BSDCOMPAT
22:22:55 executing program 0:
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x100000003, 0x3a)
sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
dup2(r0, r1)

22:22:55 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000010c0)=ANY=[@ANYBLOB="e0000001ac141439b7a96a852c569220c6c67e41c3c534f2e742fac30672e874f4934b555fee649f6300b8779f9a5e79792b5a2549a69d8dde8109ae9631ea97aa3a9accb9c9f6ae"], 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x4514162c60377bb9)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000011c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, r2, 0x1a, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x24044001)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000001140))
socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f00000012c0)={0x2, 0x4e21, @rand_addr=0x6}, 0xe8fa95219693e385)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000000c0)=""/4096)
sendto$inet(r3, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:22:55 executing program 3:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x50000, 0x0)
write$P9_RLOPEN(r0, &(0x7f00000004c0)={0x18, 0xd, 0x2, {{0x44, 0x3, 0x5}, 0x1e7}}, 0x18)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100)=0x2c93b7b9)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1], @ANYRES64, @ANYPTR, @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESDEC], @ANYRESOCT=r1, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r1], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRES32=r1, @ANYRESHEX=0x0, @ANYRES32=r1, @ANYRES64=r1, @ANYRESHEX=r1, @ANYBLOB="18041ec1f482127896519018fc8e815f4d57b5697385f65897301e3bfef5288d2cb596a587335343e77b6716674ccd39f698ad3fb2dd843c337d87cbb4aa908a07211ad2ca91a421cfdb0129f1a753f3f99f44c7115936823137dcf99d9532e4b40e6f3e2087d88b1dda9c1f34601428f4d9209058631182cbb24108c4de84ea"], @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYPTR, @ANYRESOCT=r1, @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRES32=r1, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRES32, @ANYPTR, @ANYRESDEC=r1, @ANYPTR64, @ANYRESDEC=r1]], @ANYRESDEC, @ANYRESHEX=r1], &(0x7f0000000140)=0x8)

22:22:55 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r2 = syz_open_pts(r0, 0x0)
read(r2, &(0x7f00000000c0)=""/1, 0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc))
r3 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000140))
syz_open_pts(r0, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x89c3597, 0xfffffffffffffff7, 0x6}]}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

22:22:55 executing program 6:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:55 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070")
syz_open_procfs(0x0, &(0x7f0000000100)="6377642f2e000000d873115ab98f27504ff88b5a598657b4334b8816acebdff1900645e02940054107cb228974d54c2982dd2a3802b0449d6f051ac1220500477c834d8e3cb8ed3b46af12e4524b8747daf1dff5196a137e398b46090c30d052ea98b80824dff5d66a212ea1c9a31ce9f13627248946b0110ea3dd4e67ac2a53561cc2414a9ddb3108ae")
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0)

22:22:55 executing program 0:
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x100000003, 0x3a)
sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
dup2(r0, r1)

22:22:55 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000))
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2a4)

22:22:55 executing program 7:
r0 = socket$inet6(0xa, 0x80001, 0x3)
ioctl(r0, 0x8912, &(0x7f0000000000)="025c3f0a00145f8f764070830ad6e6fae56e1718baf103735357b0b30255aa2d5dc1df1b0ccd24d189146e70c82d0ace31e991a4f161ebead07b4d13612df917803364767f18d86f4740da25bc0c5846")
flock(r0, 0x3)
r1 = socket(0xa, 0x1, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460000000000000000000000050000000000000000000000000000000040000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000ff00e3ffffff000000c2b5d531a7da80c2305f5c397e3097ad5a73bf59e8e6aca38aeb1c54fa8db834aaf2b8a57f49ba4a60a7b1da"], 0x78)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'\x00', 0x1})
dup2(r1, r2)

22:22:55 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:55 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000500))
mount(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, &(0x7f0000000240))
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000000140)=""/2, 0x450)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
recvfrom(r0, &(0x7f0000000580)=""/206, 0xce, 0x20, &(0x7f0000000340)=@llc={0x1a, 0x30a, 0x0, 0x0, 0x427d, 0x6, @random="cb211d53de88"}, 0x80)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xffffffffffffed5f, 0xffffffffffffe7f2, 0x0, 0x3, 0x12, 0x5, "1e947bafa6c6b77cb0b85eb779c033c6cc84dc0b91819c64bdd6803b8f748e64e7de6cfedc4acc97a54e5ac3d80b1ddfd478394603aa04f1aa9c6608e90a9738", "5b6ec266ee634400678625d741d553aa403d6bfcf1df012907cb60c9b6774dc32cdb681600118233cb890c6df460eeecd889eb67c3f11391ba1ff339e1447865", "9ba08f45d96d41718d7d206260d6bfc9d77a2067abaead79708c5762806d67c1", [0x1f, 0x9]})

22:22:55 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)
ioctl$VT_DISALLOCATE(r3, 0x5608)

22:22:55 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000))
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2a4)

22:22:55 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:55 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))

22:22:55 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x4, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000700))
get_thread_area(&(0x7f00000000c0)={0x0, 0x20001800, 0x0, 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x20000000000000})

22:22:55 executing program 7:
syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="0001000000ff000000000000c9030000ec000000010008000000000000000000002000000020000000010000000000006e5fbe5c0000ffff53ef0100010000006e5fbe5a0000c9040000000000000000000000010000000000800000002c", 0x5e, 0x400}], 0x0, &(0x7f00000001c0))
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x116)
recvfrom$unix(r0, &(0x7f0000000240)=""/35, 0x23, 0x2000, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e)

22:22:55 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:55 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000))
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2a4)

[  578.143766] EXT2-fs (loop7): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  578.153928] EXT2-fs (loop7): error: unable to read group descriptors
[  578.186838] EXT2-fs (loop7): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  578.205883] EXT2-fs (loop7): error: unable to read group descriptors
22:22:56 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
syz_open_pts(r0, 0x0)
read(r1, &(0x7f00000000c0)=""/1, 0x1)
r2 = gettid()
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x100, 0x8, 0x1000000000, 0x9e0, 0x0, 0x8, 0x200, 0x2, 0x7e00000, 0x4, 0x80, 0x400, 0x9, 0xfffffffffffff07f, 0x2, 0x1372b4a8, 0x3, 0x8, 0x3f, 0x3, 0x2, 0x1f, 0x3, 0xffffffff, 0x1, 0x9, 0x4, 0x0, 0xfffffffffffffff9, 0x3f, 0x2, 0x3c400000000, 0xffffffff, 0x5, 0x100000000, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0xa7e4, 0x9}, 0x10, 0x400, 0xffffffff, 0x4, 0x8, 0x3, 0x9}, r2, 0xc, r3, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd0ffc)=0x20000000000000)
r4 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000140))
syz_open_pts(r0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r4, 0x1000000000016)

22:22:56 executing program 0:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)
ioctl$VT_DISALLOCATE(r3, 0x5608)

22:22:56 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:56 executing program 2:
r0 = socket$l2tp(0x18, 0x1, 0x1)
pselect6(0x40, &(0x7f0000000100)={0x12, 0x1, 0x3fffffff8, 0x532f097e, 0x3, 0x6, 0xffff, 0x1}, &(0x7f00000001c0)={0x20, 0x10000, 0x2, 0x6, 0x4, 0x22, 0x3, 0x5}, &(0x7f0000000200)={0x5, 0x5, 0x6, 0xfffffffffffffd85, 0x3, 0x40, 0x800, 0x200}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280)={0x8}, 0x8})
r1 = dup2(r0, r0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=<r2=>0x0)
write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc0109207, &(0x7f0000000140))
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3, 0x1, 0x3, 0x3, 0x1}})

22:22:56 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000))
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2a4)

22:22:56 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000140), 0x0, 0x2)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x587002, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
getsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4)

22:22:56 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:56 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000))

22:22:56 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)
ioctl$VT_DISALLOCATE(r3, 0x5608)

22:22:56 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proh;sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))

22:22:56 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000140), 0x0, 0x2)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x587002, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
getsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4)

22:22:56 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
times(&(0x7f0000000140))
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000001ac1414aa053e000000000000"], 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101080, 0x0)
write$P9_RCREATE(r2, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x90, 0x4, 0x3}, 0x1}}, 0x18)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:22:56 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:56 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140))

22:22:56 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000040)=""/213, 0xd5, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))

22:22:56 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:22:57 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:57 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000))

22:22:57 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="c3000001ac0000000000000000000000"], 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:22:57 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r2 = syz_open_pts(r0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x440100, 0x0)
read(r2, &(0x7f00000000c0)=""/1, 0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc))
r3 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000140))
syz_open_pts(r0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

22:22:57 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:22:57 executing program 0:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)
ioctl$VT_DISALLOCATE(r3, 0x5608)

22:22:57 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:57 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:22:57 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)
ioctl$VT_DISALLOCATE(r3, 0x5608)

22:22:57 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000))

22:22:57 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000001ac1414aa000000db8a010000"], 0xfffffffffffffec7)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0xffffffffffffff6e)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', r2})
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:22:57 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:57 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:22:57 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socket$l2tp(0x18, 0x1, 0x1)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:22:57 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f000057c000/0x2000)=nil, 0x2000, 0x1)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))

22:22:57 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:57 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000))

22:22:57 executing program 5:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x12200, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001180)='bond0\x00', 0x10)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x6bfaf297b6698ecb, &(0x7f0000001140)={@broadcast, @local}, 0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000011c0))
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0xf59c3a25e11aa85)
recvfrom(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x20, &(0x7f00000010c0)=@nfc={0x27, 0x0, 0x2, 0x6}, 0x80)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0xaf, @local}, 0x10)
sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)
r3 = getpgid(0xffffffffffffffff)
wait4(r3, 0x0, 0x1, 0x0)

22:22:57 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:22:58 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcd3})
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r2 = syz_open_pts(r0, 0x0)
read(r2, &(0x7f00000000c0)=""/1, 0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc))
r3 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000140))
syz_open_pts(r0, 0x20000)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

22:22:58 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140))

22:22:58 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x0, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:58 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:22:58 executing program 0:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)
ioctl$VT_DISALLOCATE(r3, 0x5608)

22:22:58 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

22:22:58 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:22:58 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:22:58 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:58 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:58 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:22:58 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000040)=""/151, &(0x7f0000000100)=0x97)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000001c0)={'bond0\x00', {0x2, 0x4e24, @multicast2}})

22:22:58 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:22:58 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:58 executing program 5:
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x5, 0x35, 0x6, 0xa1a7, 0x0, 0x1fc0, 0x80, 0xffff, 0x3ff, 0x7ff, 0x1ff, 0x8})
socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000180))
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair(0x11, 0x5, 0x5, &(0x7f00000000c0))
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:22:58 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
creat(&(0x7f0000000380)='./file0\x00', 0x140)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:22:59 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r2 = syz_open_pts(r0, 0x0)
read(r2, &(0x7f00000000c0)=""/1, 0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc))
r3 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000140))
syz_open_pts(r0, 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

22:22:59 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:22:59 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:22:59 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))
rt_sigprocmask(0x0, &(0x7f0000000040), &(0x7f0000000080), 0x8)

22:22:59 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x7f, 0x0)
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100))
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000001ac14140700000000800000006394e334ffbe3da8a84589149aa3396ce67cc020a12ee37fbced0a5159f34e417b2b77b93b1cbb5d1b3034421010ed306ac1d77cb454fa759d44edce8863b0d2fbdf7e380ef8f8b9924e13687c0311883c713a4c2463a65bac7ac2635d97e03fd4cb0f97e6b3aa107b1690fde87da454f7e181622439318afdba320954d2e56edcc89cabc55f2f9e511fe7010ac0876675019f21b0db75c14a54d03369519d6f9ca1123919b9398bcc5b0f99"], 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000180)={'mangle\x00'}, &(0x7f0000000200)=0x54)
sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:22:59 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:22:59 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

22:22:59 executing program 0:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

22:22:59 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

22:22:59 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:22:59 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:22:59 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0xc4, @time={r1, r2+30000000}, 0x5, {0x8000, 0x3}, 0x7, 0x0, 0x1})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc0109207, &(0x7f0000000140))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000000c0)={0x1, 0x200, 0x5853})

22:22:59 executing program 6:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f000057c000/0x2000)=nil, 0x2000, 0x1)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))

22:22:59 executing program 5:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x8000, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc)
r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x20000, 0x10)
accept(r1, &(0x7f00000001c0)=@sco, &(0x7f0000000240)=0x80)
r2 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r3, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000300)=0x2)
sendto$inet(r2, &(0x7f0000000280)="3a9fabbbf61803d4c7d04d76190bbd9bea90f7dd062e2bbaef9742", 0x1b, 0x0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10)

22:22:59 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
splice(r2, &(0x7f0000000080), r2, &(0x7f00000000c0), 0x3, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x0, 0x2, 0x5, 0x0, 0x6, 0x3})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000140))

22:22:59 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

22:22:59 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r2 = syz_open_pts(r0, 0x0)
ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x5, 0x8, 0x3f, 0x401, 0x8, 0x9, 0x2, 0x7ff, 0x40})
read(r2, &(0x7f00000000c0)=""/1, 0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc))
r3 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000140))
syz_open_pts(r0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

22:22:59 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:22:59 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:22:59 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e000d4dd0000007f00000000000000000000"], 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:22:59 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))

22:22:59 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
ftruncate(0xffffffffffffffff, 0x2007fff)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe)

22:22:59 executing program 0:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:00 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:00 executing program 6:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
ftruncate(0xffffffffffffffff, 0x2007fff)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:00 executing program 5:
r0 = socket$inet(0x2, 0x80000, 0x5)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:23:00 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:00 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:00 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:00 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:00 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:00 executing program 5:
r0 = socket$inet(0x2, 0x400080001, 0x5)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x2}, 0x10)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000000c0)={0xc9af, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e20, @multicast2}}}, 0x108)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:23:00 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r2 = syz_open_pts(r0, 0x4000000100ffd)
read(r2, &(0x7f00000000c0)=""/1, 0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc))
r3 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000140))
syz_open_pts(r0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

22:23:00 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:00 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:00 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:00 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000762fff), 0x0, 0x20008084, &(0x7f000057bff0)={0x2, 0x8000004e20, @local}, 0xf9)

22:23:00 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:00 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)="2f6e7a6f632f7379732f6e65742f6970732f636f6690033661636fc0c275e1a856252c35795bfde976bae56bf99d6b0000000000", 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))

22:23:00 executing program 0:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:00 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:00 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:00 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
creat(&(0x7f0000000380)='./file0\x00', 0x140)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:00 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r2 = syz_open_pts(r0, 0x0)
read(r2, &(0x7f00000000c0)=""/1, 0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc))
r3 = gettid()
write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '/dev/ptmx\x00'}, {0x20, '@'}, {0x20, 'cgroupuser{em1'}, {}, {0x20, '/dev/ptmx\x00'}, {0x20, '/dev/ptmx\x00'}, {0x20, 'nodevvmnet1wlan1(.'}, {0x20, '/dev/ptmx\x00'}], 0xa, "68715e1c7e8cce1946cb0f5009ce29b9fb21388f80cd89920b27ba03263d01eaedfa841d4cdc93edd15bcf8db19b61da18bc2fc8f6e4eafe6bd99fdcd84c32f1e97e110d4814d8daa8c4077dc5e5760fc348d5e57a07f7cdc8c01a4b9aa48e3fa1be097447a7ec4e684c14dc8be5a0a48d0c4c30721e8d7cc2c343024d5f4e9de0c73df2f528febd4d259a546d8b0982dbf33c47af491b0092fede41c34dd2617086a5854f01de8eec746b794ab4d012fcbacae864"}, 0x111)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000140))
syz_open_pts(r0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

22:23:00 executing program 5:
r0 = socket$inet(0x2, 0x200000004, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="f0000001ac1414aa0000000000000000"], 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:23:01 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:01 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:01 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:01 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200))
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x6, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e22}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x0, 0xfffffffffffffff7, 0x6, 0x4, 0x1ff, &(0x7f00000000c0)='syzkaller1\x00', 0x8001, 0xfffffffffffffded, 0x100000000000000})
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)="2f70726f632f7379732f6e657315df0176343f7e732f706d74755f6469736397acdb0a50a500574835417fc6c96aa0988fe42c4f08c4de51d85ecef835a79cb335e21d8ccee71f287a8b0e65e79195742c6b2511306fb6bc82479f08fed356eeba7ec896bbacb206954a822a72bfabdac7c655f1ab06d14762c794b427decc4ae8fd02de6714", 0x2, 0x0)
mkdirat(r2, &(0x7f00000001c0)='./file0\x00', 0x10)

22:23:01 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:01 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:01 executing program 5:
pipe(&(0x7f00000005c0)={<r0=>0xffffffffffffffff})
r1 = accept(0xffffffffffffff9c, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000140)=0x80)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000780)=0xc3d3d51e5ea28ed0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x6, @dev={[], 0x12}}, 0x10)
r4 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setns(r0, 0x40000000)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={0x3, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x7, 0x3, 0x400, 0x8, &(0x7f0000000300), 0xebbd, 0x7fff, 0x12})
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="080100001d00200326bd7000ffdbdfa5e4000600ff020000000000000000000000000001ac1414aa0000000000000000000000004e2200004e200002020020002f0000005280e773cdddff4d647cc33e2f45c944dbae14b9fc8e8677096e7cadc0e82373c25a0d9faaa0", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="ff010000000000000000000000000001000004d56f000000fe800000000000000000000000000018030000000000000008000000000000008000000000000000040000000000000006000000000000001f00000000000000400000000000000002000000000000000900000000000000701e2a52000000006d040000000000000900000000000000000800003f000000fcffffff25bd7000000000000a00032801000000000000000c000f001f0000000000000008000400284f0000"], 0x108}}, 0x24000000)
sendto$inet(r5, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:23:01 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:01 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:01 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))

22:23:01 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:01 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)

22:23:01 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:01 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:01 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r2 = syz_open_pts(r0, 0x0)
read(r2, &(0x7f00000000c0)=""/1, 0x1)
r3 = dup(r1)
r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x400440, 0x40)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000200)={0x1f, 0x8, 0x7, {0x77359400}, 0x4, 0x5})
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000180)={0x5, 0x3, 0x1000, 0xfffffffffffffffe, 0x2})
r5 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000140))
syz_open_pts(r0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x80000)
tkill(r5, 0x14)

22:23:01 executing program 0:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:01 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e000205aee3ec6aa000000804f000000"], 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:23:01 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:01 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:01 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:02 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:02 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000300)=""/190)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f00004dd000/0x3000)=nil, 0x3000, 0x3000006)
fcntl$setpipe(r1, 0x407, 0x6)
fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
fcntl$lock(r0, 0x6, &(0x7f0000000240)={0x0, 0x0, 0x34f, 0x7fff, r2})
write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7)
sendto$inet(r1, &(0x7f0000000080)="d643e7eaaf6ab8ae77f3810a74b82d3e4a0b6ab1883310efb00e6286291b5446df767e4400f52a4265198abdf4700b0ef0f31d73fa1a22245b3c91afb1655203daa7f76574f302c6a061e70214e94cb836a336decdd82f7e9780fd307ab013c8bf8f45b8e9050ede091b16cc16d2727dc03a2f95c3d6fd3b517055ef0d1fbfad623b607e358ca8c953920908e6", 0x8d, 0x4000, &(0x7f00000001c0)={0x2, 0x4e20}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000140))

22:23:02 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:02 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@local, @empty, 0x0, 0x6, [@rand_addr=0x7, @remote, @empty, @local, @rand_addr=0xffff, @empty]}, 0x28)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10)
socket(0x2, 0x0, 0x3a49e38c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:23:02 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:02 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:02 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:02 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:02 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@broadcast, @local}, 0x10)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)
r2 = memfd_create(&(0x7f0000000200)='\x00', 0x2)
r3 = creat(&(0x7f0000000240)='./file1\x00', 0x58)
perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x800, 0x3, 0x4, 0x0, 0x8, 0x80008, 0x2, 0x9, 0x100, 0x6, 0x7, 0x76d5, 0xee26, 0xfffffffffffffffb, 0xbf9, 0x7, 0x5, 0x200, 0x3, 0x100000000, 0x3, 0x5, 0x9, 0x3, 0x5, 0x2, 0x0, 0x2cc0000000, 0xffff, 0x800, 0x0, 0x100, 0x9, 0x9, 0x5, 0x0, 0x1933, 0x7, @perf_config_ext={0x5, 0xcf}, 0x28010, 0x4, 0xfcb9, 0x7, 0xffffffffffffff7f, 0x7ff, 0x7f}, r2, 0x4, r3, 0x0)

22:23:02 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:02 executing program 1:
r0 = socket$inet(0x2, 0x200000002, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200))
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x6, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e22}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x0, 0xfffffffffffffff7, 0x6, 0x4, 0x1ff, &(0x7f00000000c0)='syzkaller1\x00', 0x8001, 0xfffffffffffffded, 0x100000000000000})
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)="2f70726f632f7379732f6e657315df0176343f7e732f706d74755f6469736397acdb0a50a500574835417fc6c96aa0988fe42c4f08c4de51d85ecef835a79cb335e21d8ccee71f287a8b0e65e79195742c6b2511306fb6bc82479f08fed356eeba7ec896bbacb206954a822a72bfabdac7c655f1ab06d14762c794b427decc4ae8fd02de6714", 0x2, 0x0)
mkdirat(r2, &(0x7f00000001c0)='./file0\x00', 0x10)

22:23:02 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:02 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:02 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000780)=0xe8)
r4 = getpid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001a00)={<r5=>0x0}, &(0x7f0000001a40)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001d00)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000001e00)=0xe8)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001e40)={<r7=>0x0}, &(0x7f0000001e80)=0xc)
r8 = getpgrp(0xffffffffffffffff)
r9 = geteuid()
getgroups(0x9, &(0x7f0000002340)=[0xffffffffffffffff, <r10=>0xee00, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01, 0xee00, 0xee00])
r11 = gettid()
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002380)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000002480)=0xe8)
r13 = getgid()
r14 = fcntl$getown(r1, 0x9)
r15 = geteuid()
fstat(r0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
sendmsg$netlink(r2, &(0x7f0000002600)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc, &(0x7f0000002280)=[{&(0x7f0000000140)={0x180, 0x1c, 0x200, 0x70bd2b, 0x25dfdbfe, "", [@generic="26fe4c6ce59051fc81fe6c377d369b4bdc579e042667d7a5412c4fdf1d637e535171dcf6fb19b50ad807ae8c91467c9da6736c9964a3b19c0abab4ab83de715230ad8c4cc8a38c87623a18fcdf274699112497", @nested={0x14, 0x75, [@typed={0x8, 0x1e, @ipv4}, @typed={0x8, 0x94, @u32=0xd3}]}, @generic="1663f1887e72ef4ed1fa0c37fe0c91ce3c5645f0f1c71a603387", @generic="43e4d8a9a5f20dd9e58109522d456b41110aed6bfb0636a61bf37b1bf90f8e80d7c8a427c174f8b80d75a2976125cb8a81e2ba67df0c73fbc2a5a8cd09cd6a2bd6814293aa3a4569e2242f9e62bdeb48b77d73a5836485132eaccc6df091275d59d4e42ab1639770b1940a65abf11f351c510841c26c1ae55c359ca64d7a584d217d2bf8856986fb0d3f78c34c7a300c11ad40ea13f54fec4b713af6e2ca8a0f9ada038fa3670f0a6d76f07928a798849b5276a1c1c5b5490dadb2260d4afe16a8fcb2f508c97c323e45aef8b28091da31f82fe7cb82f550e4fc662437fef66e2ecdc0fefbc9fe0478a1d61e12a4"]}, 0x180}, {&(0x7f00000002c0)={0x48, 0x2c, 0x900, 0x70bd26, 0x25dfdbfd, "", [@generic="a24d869832ff29bb19cfe1617fa38aa3353fa1ef0d3ed0583ce112086d47509e77e5b57433c35391e783240b8a8ea6d3b1aa9bb6b0a63c89"]}, 0x48}, {&(0x7f0000000340)={0x88, 0x10, 0x4, 0x70bd28, 0x25dfdbfd, "", [@nested={0x6c, 0x39, [@generic="c1c8dd2d9ae517b3aee74538985cbd5ce965fbc6acc249d43b8b171f320c146d410b9de3b82d1821d75e629133eb3f77ecf65258e81c0a6a58d8fc87982c79e016c1c3cee091ecb8c0dfecb329e55a36a5512f5b6bf008700cfa1e0c9d9cfb98", @typed={0x8, 0x79, @u32=0x5}]}, @nested={0xc, 0x25, [@typed={0x8, 0x34, @str='(\x00'}]}]}, 0x88}, {&(0x7f0000000400)={0x98, 0x16, 0x8, 0x70bd27, 0x25dfdbfd, "", [@generic="962a0ad11fb4e0478ec652ad88c78a539face204c2e5a7f893c1b60ffc54f4a1f764d665fd70d08b96b5db105a7273dc859bded2bd3c69f307ec2c7b3908a92808eb784273d42ddb0638be0e6fd8dd41bcbeeb0276aa87222b3624dc85b70c57abdebbc5537e04e98a512652f38d5646486b0423dd9f175045083aa884ef7d0894e58a5de395"]}, 0x98}, {&(0x7f00000004c0)={0x1b0, 0x1f, 0x206, 0x70bd27, 0x25dfdbfe, "", [@generic="66514280c3268bddd25f01ac3ee7139b76514d3e0db2489965ebbd78c3a0ee53f93972078659", @nested={0xcc, 0x38, [@generic="badc4cbb26a9604edb4ac51fb4a04bb3129b6536171b3af118ed8a30bf635076444e9c1c0f9e01764e6a8d97404fc29435492a3817bce50217e3c71210bba391852eae8b9ea251328fa5a6f3", @typed={0x1c, 0x5b, @str='md5summime_typeppp0/\x00'}, @typed={0x8, 0x96, @fd=r1}, @typed={0x8, 0x38, @str='\x00'}, @typed={0xc, 0x77, @u64=0xffffffffffffffe0}, @typed={0x28, 0x21, @str="776c616e31265d176d696d655f74797065945e73797374656d2d73656c662c252f2f2f00"}, @typed={0x8, 0x4d, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}}, @typed={0x14, 0x72, @ipv6}]}, @generic="aec05dc02588c925d17aa57a59fe846184a781115b4965e9eb63188e9d55dbafa143205e85a593d9d353532240659c0e9400468c0474f2881860", @generic="97691ce69cb06cc0823f6da8baab9a991eb85400d5a517d12a18fc4a526ef302615ef2cb41120445e75d8acedc52a398680cf23734a45c6774ac9c966bf153ba7d26baa8b9f590e44decb0eb0d94b8ebc8c22d30eb6b3351baaf3a42f212ad7aa85395f4566fdb557a24f82dae63b5104c"]}, 0x1b0}, {&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="b5"], 0x1228}, {&(0x7f0000001a80)={0x26c, 0x2f, 0x0, 0x70bd29, 0x25dfdbfc, "", [@nested={0x154, 0x5, [@generic="d66b4ef79a43def0593dcbb54f333c3544d590ca7f2ffe4c53c2838047f9a6b8baea39173165c94c53ebbb52e13a0819ed2f49d37949189879495892e1730413a97c527cc7787bf0660036e643d276cbdedb031710ac42d798a7c6e7dd6ea9fca4371234cbeec2fe95ac95dd3f47bb", @typed={0x8, 0x75, @fd=r0}, @typed={0xc, 0x35, @u64=0xc21c}, @typed={0x8, 0x3b, @pid=r4}, @generic="8061cfde705e6e6f21bfaea780e0c2b870e893128d74bcf40b8e37678cd9f046ca6eb62b6c232d2b2174724137a6fdfc72e1bd78c444a139d027699dc256801a7947dc8031535e350b6a77372f53642edd8f7b595bdfb16b9badb149c065e057db1eb0f6bc1a46cbafdf2f2616b4d678197f85377cfceaa8be0173f6a82013654c5842ccba3bf5ce138249058648f237b33cf7d05d833e048cc55e10daeae33d600faae90abc1e19f3443da3c3d3d96d7c182525c9366c588575fed3edd3f5555c1d"]}, @typed={0x8, 0x16, @u32=0xe62f}, @nested={0xf8, 0x94, [@generic="6963aaa98a6013519e163aa93237bbe747db2c55c84ccce6fc0189d663c7fbe5925a7e30db3aca39f376d5872fec1c595a02a6a8dd20ce499ad645e10c5c03c425c1e9f499710ae16356286719fb3fca294656a4ba426084676c1915f86df89c5a493d8f2adf3db8af9c7d3597ecc4aa2d9218f96a2c0376293a2856b27ce81a4e6a0524bbf162f213aabf095dc31658e4155d7a446e4dcccb7fd7eab916547e8cfa414bc1fe72e82c4dd41d5e8d173452c5dcead407500a26c424620ff7c02fc2adcfd859363beda6e14c2eaa95f19c05d1463d8ccd14226f7a7ff605a44943e8671cbf0c155db1", @typed={0xc, 0x63, @u64=0x80000001}, @generic]}, @typed={0x8, 0x8c, @pid=r5}]}, 0x26c}, {&(0x7f0000001ec0)={0x35c, 0x20, 0x20, 0x70bd27, 0x2, "", [@typed={0x8, 0x0, @ipv4=@rand_addr=0x3}, @typed={0x8, 0x69, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}}, @nested={0x18, 0xd, [@typed={0x14, 0x2b, @ipv6=@dev={0xfe, 0x80, [], 0x18}}]}, @nested={0x38, 0x5, [@generic="6cd66a46cce1ce33421a73ff17f5596c267a0b027768d94dc224d0ba08196aecd0ad60", @typed={0x8, 0x6b, @uid=r6}, @typed={0x8, 0x54, @str='\x00'}]}, @generic="5e10d3f72f490a", @generic="5ef377c73ed44faa1c09af8ac4d1e89fefa1b20e01700f4cfb8d6083577df351969133cd7dbec8c91fe319aab4d45e25b9e9d335865c84ddfe68736e4eb3e1362958df31c1234427b62dea39207230c67d0195606e16838401bcf3420d963cca3eba7bf589b4628989628e6026c9b231b920bcc1fe36b047bae714a1767f6078d8", @typed={0x8, 0x47, @str='@\x00'}, @generic="15af9c860364863084a7a2af96a15e0ecce94bcae1fd1fb1dacf70a4fd346bd04628b6c7549a2206ab0827b8f0fb2f0411b2c62920b3e0973622e79969b1c6651c2f1292965590ebea91604753e25193396eb8cc65b43cc307f4f72e5822afebe052e37e7994ea652ab37e36d0ffa717632334f129cc615b4c813cf5a9b4a6f4af5823baaf40c4a0ecb7e4935ef9fe76255a5525aa76d2cfd123487329804b4a21fc4bc30b6ba5181c9d00abf9d747604cbbae49b9e93d7abf58daa55a8c67d6f2f0e5f2f78f8621750e181213abab2a520b1c54cb3e48c1572f06b74935bf", @nested={0x17c, 0x38, [@generic="e4dc41cbec99695e7f3267b40063a3320e17d3970a9cbb4e78553f37fa148cb0660d571854efc74fbe27582a2812429958b1be9558314de522d5cb63ee0db6a38dc9dd446421ea4d3ae4773f180ee9e116a3f108edd2433360914a80b69a17174deeda8e994088cd8e66c6e6ef84ed58732af3529828236023cac22537aa685536616cf30f4c284dc54676b9996ccef236e7f40083899d3ff3a0343aa90fa50cafb2ce10e1800584b12920739ddee160caf6f4a305ab6965a72b1d42609262552aa76701d35638508391579fe7b7f0cbbb2476c068abcb8240e933488e7ada3899d253a6ab429a01fba6194af25dad07b3c5ba", @typed={0x8, 0x7, @pid=r7}, @typed={0x14, 0x72, @ipv6=@dev={0xfe, 0x80, [], 0x21}}, @generic="c7f2a1b568e299cc8aee4994ba4ec4717b638f5fa92bdb09b2fc6dc52fd874c90bb26965c065dd8154d4a64849bbbbd748b135f22da13e70c3498bdc7b1568a4344e85edbe7886c12b3da55edd6ce39e56b321f6a04056a83dafcef03e36c68b3215964b8e913483"]}]}, 0x35c}, {&(0x7f0000002240)={0x14, 0x1a, 0x8, 0x7, 0x25dfdbff, "", [@typed={0x4, 0xf}]}, 0x14}], 0x9, &(0x7f0000002540)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x20, 0x1, 0x1, [r0, r1, r1, r1]}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}], 0xb0, 0x4000}, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:23:02 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:02 executing program 0:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:02 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10)
mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000140)=""/143)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000100))
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000200)={{0x0, @remote, 0x4e23, 0x1, 'rr\x00', 0x22, 0xcb, 0x25}, {@remote, 0x4e22, 0x10003, 0x2, 0x3, 0x28a}}, 0x44)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
fchdir(r0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000400)="618daeb73fcc69e3fbe5224f4e5301000080b3aa2af3c4687c0b394489635786d4ec00e0e42b432894d7e4aadd84c74162099355c01596d20e82c91c03e78fa00c68143a33ba46202581e49f6e9e48894b46cd4fb639e301198a69b28f3e222019d3796df068496c76067ef5584a88c250aa08d028e733d16015a6867f23ab1afb349d80e46cf17df55c4c", 0x2e9, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

[  584.937586] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003
[  584.946979] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003
22:23:02 executing program 2:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x9)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
fremovexattr(r0, &(0x7f0000000080)=@known='com.apple.system.Security\x00')
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000140))

22:23:02 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:02 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:02 executing program 1:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:02 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:02 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x800, 0x0)
sendmsg$nl_netfilter(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x2a0, 0xe, 0xf, 0x410, 0x70bd2d, 0x25dfdbff, {0x1, 0x0, 0x5}, [@generic="a125b235319b9229dd462e8b0732850f2ac0f832d98309d9579fbac486db16b213038f0857fe7805804979bced518b58dcb37d74c89f6b9f36248f44b5482912a633c0badd38d17bde2686bceb7f2177895b0ca20653a83800a2d75ce89a2aa708c2e528acc139063097", @nested={0x190, 0x62, [@generic="5b00fa350ad68a77becf6961deb4f9ed39d90e5e47d72359c3d2f6d365ecbd18fcad236ef67d86da42b1860881759395e32725c35b8a0dc72a21efe1e290a99bc5924499918765ffc0ca496343b45ca25af1013fafed52cb0cd54ab8dee4c3ac51ed3cb9d023c2a0870f0da7f0b7c4d79b7dedc71e13c0d2967949d07bf10761436f603bcb080548c465b0945d20e889c89da9", @typed={0x14, 0x5b, @ipv6=@dev={0xfe, 0x80, [], 0x1c}}, @generic="5f32dbc37aee7471e8776ebb6a75f9ce785aa822d9c1a94bc0e3a4c49a3c332146926fe4133c952aa70b00b5927334e257f958a2b4778749d50a3fa7ec1b7aaa1e56b07d9bfc68028d95b25ca9a175a07126630f038d2cbd4431e86fafacdb843289c0c4329d48d495b8c669ffe719c87a0df476f8731e98c29f5ef846c4b2dafea91451f0e05700f3bdbfe9e4d506471e1748a217ad4428aaeb2b192f3e5b239c29b0cf1daa31b238da10b1458d1aff9c26b6762dc3a3907dd10e6b9e85433b21275039b3d0e3950458e6134b8fe0358f238824ec41046cebc92dbc0734f92d3c6c6e"]}, @generic="1a0ae95efa558aea5d1e336aa61219d457681162f3ff83649cec9d9c2efdde8c33f2b291a3b7c0b12c685dfc507a9cc80cb813b5d84eb6a306822edfb1943e96a4623c28627fe068844af3908ba8be3eb6e2c02ea96a57b7266a13f28c827ffba6135008904ed2ad13ad83a25f8ad53ab72c8869ac6470ac307df86f9f688f4d07e9ab95bc404b6329504cd2f45ffb"]}, 0x2a0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000480)={0x3ff, 0x7f, 0x40, 0x5, 0xffff, 0xffff})

22:23:02 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:02 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000001ac1414aa0000000000000004"], 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:23:03 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:03 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
ioctl$BLKROSET(r3, 0x125d, &(0x7f00000004c0)=0x3f)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:03 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  585.174847] 9pnet: Insufficient options for proto=fd
[  585.188082] 9pnet: Insufficient options for proto=fd
22:23:03 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000016ac1414aa0000000000e70000"], 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x200040, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000180)={<r3=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={<r4=>0x0})
r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000400)={<r6=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)={<r7=>0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000740)={0x18c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000100), &(0x7f0000000140)=[0x18, 0x20, 0x0]}, 0x4}}, @acquire={0x40046305, 0x4}, @enter_looper, @free_buffer={0x40086303, r3}, @reply={0x40406301, {0x4, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x38, 0x18, &(0x7f0000000200)=[@flat={0x73682a85, 0xa, r4, 0x1}, @fda={0x66646185, 0x6, 0x3, 0x18}], &(0x7f0000000240)=[0x38, 0x38, 0x30]}}, @reply_sg={0x40486312, {{0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x68, 0x30, &(0x7f00000002c0)=[@fda={0x66646185, 0x0, 0x2, 0xa}, @fda={0x66646185, 0x7, 0x0, 0x2d}, @ptr={0x70742a85, 0x0, &(0x7f0000000280), 0x1, 0x2, 0x17}], &(0x7f0000000340)=[0x40, 0x48, 0x30, 0x40, 0x18, 0x0]}, 0x4}}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x20, &(0x7f0000000380)=[@fda={0x66646185, 0x9, 0x2, 0x13}, @fd={0x66642a85, 0x0, r1, 0x0, 0x3}], &(0x7f00000003c0)=[0x30, 0x78, 0x38, 0x78]}, 0x8902}}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000480)=[@flat={0x73622a85, 0x1, r5, 0x3}, @flat={0x776a2a85, 0xa, r6}, @flat={0x73622a85, 0x101, r7, 0x1}], &(0x7f0000000500)=[0x18, 0x30, 0x48, 0x18, 0x70, 0x0]}, 0x80000000}}], 0x17, 0x0, &(0x7f0000000700)="622c5d4958254b9c1c13684651aaa38983c4e6f2bfc07d"})
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:23:03 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:03 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  585.302384] 9pnet: Insufficient options for proto=fd
[  585.327792] 9pnet: Insufficient options for proto=fd
22:23:03 executing program 0:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20002000})
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:03 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x10001, 0x22100)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'team_slave_1\x00', 0x8})
sysfs$2(0x2, 0x7f, &(0x7f00000000c0)=""/123)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000240)={'raw\x00'}, &(0x7f0000000000)=0x54)

22:23:03 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
creat(&(0x7f0000000380)='./file0\x00', 0x140)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:03 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast1, @local, 0x0, 0x1, [@broadcast]}, 0x14)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000140)={0x2, 'veth1\x00', 0x3}, 0x18)
r2 = memfd_create(&(0x7f0000000040)='\x00', 0x2)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000000)=0x400)
ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000100))
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x4)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:23:03 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  585.696753] 9pnet: Insufficient options for proto=fd
[  585.709523] 9pnet: Insufficient options for proto=fd
22:23:03 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
creat(&(0x7f0000000380)='./file0\x00', 0x140)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:03 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:03 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:03 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="a2aef0cbcd24c6c20000000000003700"], 0x10)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000240)=0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x20000)
syz_open_pts(r2, 0x20000)
ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000100)=""/209)

22:23:03 executing program 2:
utime(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x9, 0x5})
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/169, 0xa9}, {&(0x7f00000001c0)=""/155, 0x9b}], 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000140))

22:23:03 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:03 executing program 3:
socket$inet6(0xa, 0x1000000000002, 0x0)
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:03 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:03 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000140))
ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000080))

22:23:03 executing program 3:
socket$inet6(0xa, 0x1000000000002, 0x0)
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:03 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:04 executing program 0:
socket$inet6(0xa, 0x1000000000002, 0x0)
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:04 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000001148610ac1414aa0000000000"], 0x10)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000100)={0x2a, 0x3, 0x0, {0x5, 0x9, 0x0, 'vmnet1{*\x00'}}, 0x2a)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
dup(r2)
sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:23:04 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
creat(&(0x7f0000000380)='./file0\x00', 0x140)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:04 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x70, 0x7fffffff, 0x8, 0x81, 0x8001, 0x0, 0x6, 0x4000, 0x1, 0xd58c, 0x9, 0x7, 0x10001, 0x1, 0x5, 0x2, 0x10000, 0x3ff, 0x5, 0x0, 0x9, 0x6, 0x4, 0x400, 0x100, 0x81, 0x1800000000000000, 0x4, 0x1f, 0x3, 0x0, 0x5, 0x6, 0x1ff, 0x7, 0x0, 0x7, 0x0, 0x2b, 0x5, @perf_bp={&(0x7f0000000040), 0x7}, 0x220, 0x80, 0x7, 0x7, 0x80000000, 0x7fffffff, 0x80}, r0, 0xb, r1, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000140))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000001c0)="54260c6b4196bb30f31165e8d40aa061e93a40c3ee03756dc77b1acf9d1c73acdbfb10a6cc7e2d54eb289fa26abecb68d14b162bbba04c96905f4044650a76f2ebec915b568550bcc1349b54b29518540699eb78e1ef")
r2 = getgid()
ioctl$TUNSETGROUP(r0, 0x400454ce, r2)
write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7)

22:23:04 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:04 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:04 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:04 executing program 3:
socket$inet6(0xa, 0x1000000000002, 0x0)
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:04 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:04 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
creat(&(0x7f0000000380)='./file0\x00', 0x140)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:04 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))

22:23:04 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:04 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)={0x8, {{0x2, 0x4e22, @multicast2}}, 0x1, 0x5, [{{0x2, 0x4e24, @local}}, {{0x2, 0x4e21}}, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}}]}, 0x310)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000400), 0x4)

22:23:04 executing program 3:
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:04 executing program 0:
socket$inet6(0xa, 0x1000000000002, 0x0)
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:04 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'irlan0\x00', 0x1}, 0x18)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000140))

22:23:04 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:04 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:04 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:04 executing program 3:
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:04 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
creat(&(0x7f0000000380)='./file0\x00', 0x140)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  586.803486] 9pnet: Insufficient options for proto=fd
22:23:04 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
getsockname(r0, &(0x7f00000000c0)=@can, &(0x7f0000000140)=0x80)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000300)={@multicast1, @local, r1}, 0xffffffffffffff76)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:23:04 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:04 executing program 0:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000001ac1414aa0000000000000004"], 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:23:04 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  586.823768] 9pnet: Insufficient options for proto=fd
22:23:04 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
creat(&(0x7f0000000380)='./file0\x00', 0x140)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:04 executing program 3:
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  586.933805] 9pnet: Insufficient options for proto=fd
22:23:04 executing program 0:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:04 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:04 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000000c0)={0x4, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @remote}, 0x35, 0x0, 0xfffffffffffffffe, 0x5, 0x5645, 0x0, 0x7ff, 0x100000000, 0x5})
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:23:04 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  586.956424] 9pnet: Insufficient options for proto=fd
[  587.064795] 9pnet: Insufficient options for proto=fd
[  587.081299] 9pnet: Insufficient options for proto=fd
22:23:05 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
timer_create(0x6, &(0x7f00000000c0)={0x0, 0x15, 0x2, @thr={&(0x7f0000000040)="fba3350a041aba14bfeca668eb978f3616795feef8cdae345f8f6029c62ba18e6cb05d4d4e2efc13fafe88923b93506cc6881be3cb26a649a69da52527b0f907aaeacf64ece49fd55b105bddc730f2abb6aff02feb713350f1f464b9", &(0x7f00000001c0)="7ccff67b17d3a95ae5b97f987ab4f2998168182ebcb466a4ab0d7d1da32ee78c6733c0926fb8590d16453808857fb100b1365106d9a9112c6ad29ba6e192c27befe618331db003d97301ba67381811c7334b326e38073a12544497ee929255bb5ece64871af03d26d0b6032e8e91c95ea52de3514a7a6591b3fd0d36bff4b8cdccb8802189bcbac04baf3cffbf9325e5a77e14f54ca7adbc400b3740e8e592c688c9ec4a28d827711144407710ac9e435bbba7e5551927f157428ba0264d61507714e65e16af43f8490ad8e2a59e2f3c10bdfed4ebd29c1ae83f762067a91a2b76b16f9f7d4281b10faf5a34043ac8452c9ce1cb139b489926d8"}}, &(0x7f0000000100))
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))

22:23:05 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:05 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
creat(&(0x7f0000000380)='./file0\x00', 0x140)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:05 executing program 3:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:05 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000001ac1414aa000078b700000000"], 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:23:05 executing program 7:
socket$inet6(0xa, 0x1000000000002, 0x0)
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:05 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:05 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
creat(&(0x7f0000000380)='./file0\x00', 0x140)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:05 executing program 7:
socket$inet6(0xa, 0x1000000000002, 0x0)
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:05 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:05 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000010dc79547c378a3044b7ab20000000000000000"], 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:23:05 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r1, 0x2007fff)
sendfile(0xffffffffffffffff, r1, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:05 executing program 0:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:05 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f00005e7000/0x3000)=nil, 0x3000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))

22:23:05 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:05 executing program 3:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:05 executing program 7:
socket$inet6(0xa, 0x1000000000002, 0x0)
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:05 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
creat(&(0x7f0000000380)='./file0\x00', 0x140)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:05 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e0000001ac000000000000f7ff00007b97e92f7e0e14b895c1a87ea1711300"], 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f00000001c0)="e56b4a9ce380ea707090fba0b3fa6465d5d35cb582f8332a508b1fa2272acc85881e0dc02c0e0282c1ab28073bc2b80694a01dcb389941c110ae9c5b909492b9d2ead37b296c21291891f44b6ef6734a5ad5ccb22253a6358e6757349e27edd6db8466c479c2eb685530429f539ac27f790ae2181ee5284ceb2ad5da86bccbbf27d3f76a8cf220104033c64d6d5ef45a28fe3feb8cecc790e0a4409330410c28dce99d540427c61ec57137ba014625a06b30aa740f3d0a4c5ee2e4960f8d72b38eb0000000000000", 0xc8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x200, 0x0)
ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000100)=""/137)

22:23:05 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r1, 0x2007fff)
sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:05 executing program 7:
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:05 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
creat(&(0x7f0000000380)='./file0\x00', 0x140)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:05 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:05 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:05 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_pts(r0, 0x2)
ioctl$TIOCCONS(r2, 0x541d)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

22:23:05 executing program 3:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:05 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:05 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:06 executing program 0:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:06 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
creat(&(0x7f0000000380)='./file0\x00', 0x140)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:06 executing program 7:
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:06 executing program 5:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r1, 0x2007fff)
sendfile(0xffffffffffffffff, r1, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:06 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:06 executing program 3:
socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:06 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/3)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000140))

22:23:06 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:06 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:06 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:06 executing program 3:
socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:06 executing program 7:
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:06 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
shutdown(r0, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000140))

22:23:06 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:06 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8003)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r2=>0x0)
syz_open_procfs(r2, &(0x7f00000001c0)="b69330392861747900")
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000140))
write$P9_ROPEN(r0, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x0, 0x3}, 0xd3}}, 0x18)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$TUNSETGROUP(r0, 0x400454ce, r3)

22:23:06 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:07 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/3)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000140))

22:23:07 executing program 3:
socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:07 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:07 executing program 7:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:07 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:07 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:07 executing program 5:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r1, 0x2007fff)
sendfile(0xffffffffffffffff, r1, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:07 executing program 0:
socket$inet6(0xa, 0x1000000000002, 0x0)
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:07 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:07 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:07 executing program 7:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:07 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:07 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:07 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:07 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
fallocate(r0, 0x0, 0x6, 0xffffffffffff3e97)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000040))

22:23:07 executing program 0:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

[  589.624448] 9pnet: Insufficient options for proto=fd
[  589.635733] 9pnet: Insufficient options for proto=fd
22:23:07 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:07 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:07 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:07 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:07 executing program 7:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  589.743571] 9pnet: Insufficient options for proto=fd
[  589.755413] 9pnet: Insufficient options for proto=fd
22:23:07 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

[  589.845973] 9pnet: Insufficient options for proto=fd
[  589.858024] 9pnet: Insufficient options for proto=fd
22:23:08 executing program 5:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r1, 0x2007fff)
sendfile(0xffffffffffffffff, r1, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:08 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:08 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:08 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:08 executing program 6:
socket$inet6(0xa, 0x1000000000002, 0x0)
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:08 executing program 7:
socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:08 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:08 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:08 executing program 7:
socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:08 executing program 0:
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:08 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:08 executing program 6:
socket$inet6(0xa, 0x1000000000002, 0x0)
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:08 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:08 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000618000/0x3000)=nil, 0x3000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)

22:23:08 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:08 executing program 7:
socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:09 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x400000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000200)={{0x0, 0x3, 0x9, 0x1, 0x1}, 0x9, 0x6, 'id0\x00', 'timer0\x00', 0x0, 0x8001, 0x5, 0x9, 0x5})
r1 = getegid()
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getgroups(0x1, &(0x7f00000000c0)=[<r3=>0xee00])
setresgid(r1, r2, r3)
r4 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000300)=""/177)
ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:09 executing program 6:
socket$inet6(0xa, 0x1000000000002, 0x0)
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:09 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:09 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:09 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:09 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:09 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:09 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:09 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:09 executing program 0:
r0 = socket(0x11, 0x2, 0x1)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000b80)={0x21, @multicast2, 0x4e23, 0x1, 'fo\x00', 0x20, 0x1, 0x68}, 0x2c)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000b00)=@broute={'broute\x00', 0x20, 0x1, 0x9f8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000030000002100000062f7726f736530000000000000000000000073797a6b616c6c65723000000000000073797a5f74756e00000000000000000076657468305f746f5f626f6e640000000000000000000000ffffff00aaaaaaaaaabbff00ffffff0000005808000000090000380900007533320000000000000000000000000000000000000000000000000000000000c0070000000000000700000001000000ffffffff010000000800000000000000090000000300000008000000000000000600000000000000000000000100000081000000030000000100000002000000050000000300000005000000030000006007000000000000b700000000000100000800000100000069950000020000000200000005000000010000000700000007000000f00c0000010000000300000000000100090000000600000001040000faffffff03000000040100002dc6000003000000eb00000003000000010000000200000006000000030000007f0000000300000005000000000000000300000003000000050000000300000065000000030000003df0000002000000ff00000000000000ebd3000014000000620000000100000000000100242900000900000001000000070000000400000005000000030000000400000016a80000010000002e26000002000000090000000400000073000000ffffff7f00020000040b00002d000000000000000500000000000000a900394b010000000800000001000000050000000000000001000100000000000100000002000000030000000300000070c9000002000000050000000300000000000000000000000200000036000000000000000600000000080000aa9400008100000020000000b50e0000ff030000ff7f0000bc0900003c06000000f8ffff01000000b30200000b7300001d090000b500000008000000de040000060000000606000000010000030000001557000000000000a8b0000003000000000000800200000082bc0000030000004000000003000000050000000300000006000000030000000180ffff0200000078000000030000000200000001000000080000004300000006000000fffffffff8ffffff01010000d41700000100000001000000ffffffff010400000100000001f0ffff0800000000000000ff7f00000800000020000000080000003f00000087000000020000000801000002000000030000000004000003000000000000000300000026050000020000000000000001000000ff0f000000000000ffffffff000000000600000003000000260000000100000005000000020000000500000003000000070000000700000000040000010000809868000001010000040000000900000003000000000000003dde0000030000001b7700000900000001000080040000000900000006000000090000000000000001000080fcffffff01010000ff03000002000000000000000200000009000000020000000000000003000000ff030000030000000300000000000000020000000300000015dd000000000000030000000300000001f0ffff0100000007000000020000000300000000000000000800000300000080000000200000000900000000000000ee0000000500000001000000ffffffff00000000070000000800000007000000ffffff7f00000000810000000001000053e8000009000000020400000200000001000000aec20000030000007f00000000000000fcffffff02000000334a00000300000005000000010000000100008003000000000100000300000001000000000000000300000000000000010000000100000000100000ff7f000000000000ff030000cd000000030000000800000008000000456100000180ffff0400000000000000070000009e010000050000000300000009000000f8090000d2beffffff0f0000090000000100000000070000000000800100000001000080020000000000000000000000ff7f000002000000000000000000000000081e000100000007000000000000000500000003000000060000006900000006000000000000000900000000000000f9ffffff0000000003000000ff0f0000070000000400000000000000790900000104000011b60000060000000000000009000000ffffff7f04000000003b000005000000090000000000000000000080010001000300000006090000f13900000300000006000000020000003808000003000000070100000000000006020000000000008000000003000000071200000200000001010000030000000000003403000000ffffff7f0300000006000000020000000800000009000000010400000700000080ffffff05000000080000000800000008000000020000000500000003000000590300000800000001000000000200000200000000000040000000000600000005000000f9f20000050b000001000000030000000000000001000000000000000000000002000000000000001561ffff030000000100000002000000810000000300000001000000020000000000010000000000ae00000000000000ff030000020000000800000005000000090000000400000001000000ff0f0000090000000100000033000000080000000300000001000080018000000200000006000000060000000000000003000000010001000900000078000000000000000b0700000200000000000000c1ffffff0000000002000000000000000900000003000000040000000300000000000000000000000400000003000000080000000300000003000000000000000000008003000000010000000300000001f0fffffcffffff01000000ff01000000000000d908000003000000090000000600000008000000040000000900000000100000020000000700000002000000050000000800000002000000ffffffffa597000005000000030200000a0000004155444954000000000000000000000000000000000000000000000000000000080000000000000002000000000000004e464c4f47000000000000000000000000000000000000000000000000000000500000000000000005000000010081000000000010014d9034e69bcf22a21a2b6f995773115fd2d27537fea5decac19df2c35289fcf8d6483222d344a4d870de5f8fe218b7733a38438b2307059880b721e3be17000000006d61726b000000000000000000000000000000000000000000000000000000001000000000000000e0ffffff00000000ffffffff00000000"]}, 0xa70)
r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/pktcdvd/control\x00', 0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000c00)='threaded\x00', 0x9)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x80002c0}, 0xc)
accept(r1, &(0x7f0000000d00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000bc0)=0x80)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000c40)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, {0x1, @remote}, 0x0, {0x2, 0x4e23, @broadcast}, 'lo\x00'})
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)

22:23:09 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc8070014")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:09 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:09 executing program 6:
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:09 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
r2 = eventfd(0x1000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
fcntl$getown(r1, 0x9)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000040))
mmap(&(0x7f00006f2000/0x2000)=nil, 0x2000, 0x0, 0x20010, r2, 0x2b)

22:23:09 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0xfffffffffffffffc, 0x3, 0x0, 0x3, 0x7f}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
write$P9_RRENAME(r1, &(0x7f0000000000)={0x7, 0x15, 0x1}, 0x7)

22:23:09 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:09 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:09 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc8070014")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:09 executing program 6:
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:09 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:09 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = getpgid(0xffffffffffffffff)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300))
setxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='security.ima\x00', &(0x7f0000000280)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x20, 0x0)
syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x3, 0x4400)
waitid(0x0, r1, &(0x7f0000000040), 0xc0000009, &(0x7f0000000140))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000000c0))
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000400)=""/46)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000440))

22:23:09 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:09 executing program 0:
socket$inet6(0xa, 0x1000000000002, 0x0)
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:09 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:09 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:09 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc8070014")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:09 executing program 0:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0x80, 0x1e, 0x8001})
openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc)
r1 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffc)
ioctl(r1, 0x8000000000008912, &(0x7f0000000280)="025cc80700145f8f764070")
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd)

22:23:09 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:09 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:09 executing program 6:
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:09 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:09 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:09 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:09 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f76")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:09 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc8070014")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:09 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
eventfd2(0x18000000000000, 0x80000)

22:23:10 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:10 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:10 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:10 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f76")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:10 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
keyctl$session_to_parent(0x12)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))

22:23:10 executing program 6:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:10 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:10 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x82)
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x3, 0x0)

22:23:10 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f76")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:10 executing program 6:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:10 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:10 executing program 0:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(r2, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000000)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000000000000000000000010000002f000002"], 0x14}}], 0x2, 0x0)
r3 = dup2(r1, r0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000180)={0x31, 0x3, 0x0, {0x0, 0x10, 0x0, "2f2d776c616e30275e6d643573756df8"}}, 0x31)
setsockopt$sock_void(r1, 0x29, 0x23, 0x0, 0x0)

22:23:10 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:10 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))

22:23:10 executing program 5:
r0 = gettid()
sched_setparam(r0, &(0x7f0000000000)=0x5)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)

22:23:10 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:10 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x3, 0x6c6, 0x1, 0x994, 0x9})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))

22:23:10 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f7640")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:10 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc8070014")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:10 executing program 6:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:10 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

[  592.621191] 9pnet: Insufficient options for proto=fd
[  592.654138] 9pnet: Insufficient options for proto=fd
22:23:10 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:10 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f7640")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:10 executing program 0:
fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000200)={0x0, <r0=>0x0})
r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7, 0x4000)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={<r3=>0x0, @multicast2, @dev}, &(0x7f0000000280)=0xc)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000300)={r3, 0x1, 0x6}, 0x10)
r4 = socket$inet6(0xa, 0x3, 0xa)
r5 = inotify_add_watch(r2, &(0x7f00000002c0)='./file0\x00', 0x0)
inotify_rm_watch(r2, r5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20)
ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f00000000c0)={0x8, 0x9, 0x5, 0x8c})
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000140)=""/179)
dup3(r1, r4, 0x80000)
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000340)={@empty, @local, @local, 0x1, 0x0, 0x0, 0x100, 0x10001, 0x80000040, r3})

22:23:10 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
pipe(&(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

[  592.767825] 9pnet: Insufficient options for proto=fd
22:23:10 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc8070014")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:10 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))

[  592.792202] 9pnet: Insufficient options for proto=fd
22:23:10 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:10 executing program 6:
socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:10 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f7640")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:10 executing program 0:
mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0)
r0 = open(&(0x7f0000625000)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000643ff8)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0)
r2 = openat(r1, &(0x7f00006e9ff8)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', &(0x7f00009b9000)="0500de00667300", 0x1008, &(0x7f0000000100))
symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f00000000c0)='./file0/file0/file0/file0\x00')
membarrier(0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000000c0))
r3 = socket(0xa, 0x1, 0x0)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0)
write$sndseq(r4, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30)
dup2(r3, r4)
r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82)
sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, &(0x7f0000000000), 0x0)
listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
unlinkat(r1, &(0x7f0000000000)='./file0/file0/file0/file0\x00', 0x0)

22:23:10 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

[  592.933553] 9pnet: Insufficient options for proto=fd
22:23:10 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc8070014")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  592.973447] 9pnet: Insufficient options for proto=fd
22:23:10 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:10 executing program 6:
socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:10 executing program 0:
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, <r0=>0x0})
waitid(0x1, r0, 0x0, 0x20000000, &(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = gettid()
tkill(r1, 0x28)
rt_sigqueueinfo(r1, 0x0, &(0x7f0000000140))

22:23:10 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:10 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:10 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f76")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:10 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)="2f70726f632f7379732f6e657402007076342f76732f636f6e6e747261636b000b4e1d1813149c064fc86a8df6f1552e68b3a1ad2a7df7fdb1fe86713cb7dd4aef5e", 0x2, 0x0)
pipe(&(0x7f0000000040))
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000659000/0x4000)=nil, 0x4000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000140))
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)

22:23:11 executing program 6:
socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:11 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:11 executing program 5:
r0 = signalfd(0xffffffffffffff9c, &(0x7f0000000280)={0x1}, 0x8)
writev(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)="ad29c87cc8d9a135553e8774b90285842c579252c8b52a1a530255c2a9d14fd8b740f14e6a12616917bb8dd84595031cdc41632a7cc0493bb555ecf6128aa6f87e881d92b86a3a4d5e900acb8b690516effa91f714c5a74298ea49b2df60cba78c577ce5f801659f8c61dbf0a313765a199f8d8d0ee8383c5c57fb19e8a3d7f96407e62fbbbea990edf71f7f0bd8a6edecc9f9d29f31cae451702243e7efcd3816ea7f2f0b2fbc801467be6d5328267f49f0e2216502f539fb10c13ad4", 0xbd}, {&(0x7f0000000380)="29ca22d3053ff67a03a7abc8974d09e6809022044cf051067af1fde209dfe2543e76f876887d4590c9e7b3d06dd3c8fb1c3155765ed5dff1d31dae51f9ab43cf6124dd3bdff6a4ee32089f15cb8ebc", 0x4f}, {&(0x7f0000000400)="25fe834e", 0x4}, {&(0x7f0000000440)="0c53384e9956893b0bf9a65c242a493317a465e1425f21b95fc35335701b535e7d3bc2035c91432d9f4549fae96a95ec46947c3d9083c585ddf9f549", 0x3c}, {&(0x7f0000000540)="8db73111a9087110a3843f280a1ad67046abb2e41e98a8b2ab87d56d453fff0fcc5736070d7f7f2408951ade3887508eaf76a6229d604a757eae5b12aa98cbf5400ade4e0eccbbf8a47e870e4da2d0969df82c6029dc89644a1e446ab3b5bde0297a11a94bc7008586cb5e2efd498c17cbf121156a109cf5ec1cf24a53fa2c5941143592a78fcd71bf2be2f7e4a118b875638f478cf0ff10d6e361f88bfa9a6885fdf8", 0xa3}], 0x5)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0xfff0000000000003, 0x80}})
r2 = memfd_create(&(0x7f00000000c0)='vmnet1eth0\x00', 0x0)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000140))
epoll_create(0xd67f)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000180)=""/204)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000680))
openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x0, 0x0)

22:23:11 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:11 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
r1 = getpgid(0xffffffffffffffff)
r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/rpc\x00')
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e000000100000000000000000800120002000200000000000000000010000000020300000000000f00000000020000000000000092ab000000000001020014bb000000000000000000000000030005000000000002000000e00000010000000002000000"], 0x80}}, 0x0)
ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000100))
ioctl$FICLONE(r0, 0x40049409, r2)

22:23:11 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f76")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:11 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:11 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:11 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:11 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:11 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:11 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:11 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f76")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:11 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
fstat(r0, &(0x7f0000000140))
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
socket$inet6(0xa, 0x4, 0x7f)

22:23:11 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

[  593.481228] 9pnet: Insufficient options for proto=fd
[  593.762151] attempt to access beyond end of device
[  593.767128] loop0: rw=536870912, want=130, limit=112
[  593.772287] buffer_io_error: 250 callbacks suppressed
[  593.772293] Buffer I/O error on dev loop0, logical block 129, lost async page write
[  593.785642] attempt to access beyond end of device
[  593.790596] loop0: rw=536870912, want=131, limit=112
[  593.795757] Buffer I/O error on dev loop0, logical block 130, lost async page write
[  593.803618] attempt to access beyond end of device
[  593.808552] loop0: rw=536870912, want=132, limit=112
[  593.813722] Buffer I/O error on dev loop0, logical block 131, lost async page write
[  593.821601] attempt to access beyond end of device
[  593.826538] loop0: rw=536870912, want=133, limit=112
[  593.831698] Buffer I/O error on dev loop0, logical block 132, lost async page write
[  593.839532] attempt to access beyond end of device
[  593.844504] loop0: rw=536870912, want=142, limit=112
[  593.849641] Buffer I/O error on dev loop0, logical block 141, lost async page write
[  593.858020] attempt to access beyond end of device
[  593.863116] loop0: rw=536870912, want=143, limit=112
[  593.868285] Buffer I/O error on dev loop0, logical block 142, lost async page write
[  593.876180] attempt to access beyond end of device
[  593.881139] loop0: rw=536870912, want=144, limit=112
[  593.886447] Buffer I/O error on dev loop0, logical block 143, lost async page write
[  593.894306] attempt to access beyond end of device
[  593.899288] loop0: rw=536870912, want=145, limit=112
[  593.904443] Buffer I/O error on dev loop0, logical block 144, lost async page write
[  593.913220] attempt to access beyond end of device
[  593.918180] loop0: rw=536870912, want=2178, limit=112
22:23:11 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))
ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x1)

22:23:11 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:11 executing program 1:
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:11 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f7640")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:11 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:11 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

22:23:11 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000), 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:11 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="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")

[  594.027267] 9pnet: Insufficient options for proto=fd
22:23:11 executing program 1:
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:11 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:11 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f7640")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:11 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:11 executing program 2:
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x321000, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f00000001c0))
socket$nl_generic(0x10, 0x3, 0x10)

22:23:11 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x80000000, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1000, 0xc7f3eb8d00f50c26)
ioctl$KDDELIO(r1, 0x4b35, 0x3)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:11 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000), 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:12 executing program 1:
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:12 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:12 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f7640")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  594.227226] 9pnet: Insufficient options for proto=fd
22:23:12 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:12 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80, 0x0)

22:23:12 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000), 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

[  594.393586] 9pnet: Insufficient options for proto=fd
22:23:12 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

22:23:12 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:12 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:12 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:12 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:12 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x301000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000000c0)={0xfffffffffffffff9, 0x8001, 0x7})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:12 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

[  594.618503] 9pnet: Insufficient options for proto=fd
[  594.625360] attempt to access beyond end of device
[  594.625367] loop0: rw=536870912, want=130, limit=112
[  594.625374] Buffer I/O error on dev loop0, logical block 129, lost async page write
[  594.625384] attempt to access beyond end of device
[  594.625388] loop0: rw=536870912, want=131, limit=112
[  594.625393] Buffer I/O error on dev loop0, logical block 130, lost async page write
[  594.625403] attempt to access beyond end of device
[  594.625407] loop0: rw=536870912, want=132, limit=112
[  594.625418] attempt to access beyond end of device
[  594.625422] loop0: rw=536870912, want=133, limit=112
[  594.625431] attempt to access beyond end of device
[  594.625436] loop0: rw=536870912, want=142, limit=112
[  594.625447] attempt to access beyond end of device
[  594.625451] loop0: rw=536870912, want=143, limit=112
[  594.625462] attempt to access beyond end of device
[  594.625466] loop0: rw=536870912, want=144, limit=112
[  594.625476] attempt to access beyond end of device
[  594.625481] loop0: rw=536870912, want=145, limit=112
[  594.626523] attempt to access beyond end of device
[  594.626529] loop0: rw=536870912, want=2178, limit=112
22:23:12 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x20)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000180)=0xc)
write$FUSE_ENTRY(r1, &(0x7f00000001c0)={0x90, 0x0, 0x6, {0x6, 0x3, 0x80, 0x2, 0xffff, 0x3, {0x5, 0x8015, 0x80000000, 0xc3fe, 0x7fff, 0xb74e, 0xd31, 0x81, 0x7, 0x94000000000000, 0x9, r2, r3, 0x3f, 0x3f}}}, 0x90)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getpeername$packet(r1, &(0x7f00000004c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'eql\x00', r4})

22:23:12 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

22:23:12 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:12 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:12 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:12 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x2, 0x1, 0x4, 0x0, 0xffffffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000)=0x707, 0x4)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000140)={{0x5, 0x6}, 'port0\x00', 0x20, 0x0, 0x0, 0x3, 0x3, 0xcf11, 0x1, 0x0, 0x7, 0x9})

22:23:12 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:12 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  594.992318] attempt to access beyond end of device
[  594.997373] loop0: rw=536870912, want=114, limit=112
[  595.003747] attempt to access beyond end of device
[  595.013979] loop0: rw=536870912, want=115, limit=112
[  595.024782] attempt to access beyond end of device
[  595.030468] loop0: rw=536870912, want=116, limit=112
[  595.035787] attempt to access beyond end of device
22:23:12 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:12 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7fffffff, 0x101000)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000240)=0x1400)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000400)="403263e5776062823c4e3817371bbfcd14bd4d90385b0cbec9ef5558ad87ab7c97fc146d5d296b1c6fe183c6a63a2e8a65ebaa568b12e014fc7378c9ec97061f2c32f4ab130f40079bacc98a6226c6fe0477b413f6d9f35d2359aa1ceead482e35175e5c6ff4f481a8d60d82548a57639931defac6219b310921325f1653187f1ccaa885509373cdd518e6c06f4f0422", 0x90}, {&(0x7f0000000540)="cb7ac26a2ba6881038f133519c0250d7da6d597fd2c30c39986806d9df84ec4025018c7fcfadcb8f3b8b163609ebb99fae472b468456229de72df389a42a47c8fccf9b2d90542444ed0734e22c22cae660e6750bd246eb82771d252bd1d7f9dfbd073a507f3de433282dd080c8d9de0b3b5df09211ee24b1bae9994a1bc7bca3c8334cd022d7d4421b24c2321671b87c3e1091d7b141d2a6bc2f251e10c61e27e25fa176f6f2a9913d6f0e258038013542953078f62cbdd50844e0bb97d075f9142ef1", 0xc3}], 0x2, 0x2)
r2 = memfd_create(&(0x7f0000000000)='{\x00', 0x2)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000680)="563514dcccdacd70891aa290e64a3418cd878d215ceb487e450a76d056ebdaece44ba9d895cb16cf00c956cde13946f7f08dfe625bbcbfaefc363bea128f2d07ed472264d7c6bc5d6791227624757cd6b02d2cf431d3bcf9f0d9fa3feba023d2e9f37384dec7d77f41dfd40227456badd24d324382b4675d196853655d52d6c05745fab7e380e0f3d7de8e02230bd52efd0c53941b78f120438685b8abe6")
syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x105000)
accept$unix(r2, &(0x7f0000000280), &(0x7f0000000300)=0x6e)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)=<r4=>0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000340)={0x2, 0x2, 0x8, 0x10000, r4})

[  595.040721] 9pnet: Insufficient options for proto=fd
[  595.058517] loop0: rw=536870912, want=117, limit=112
[  595.083570] attempt to access beyond end of device
[  595.088757] loop0: rw=536870912, want=130, limit=112
22:23:12 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:12 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:12 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc8070014")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

[  595.096639] attempt to access beyond end of device
22:23:12 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:13 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
renameat2(r1, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='.\x00', 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000140))

[  595.118972] loop0: rw=536870912, want=131, limit=112
[  595.124205] attempt to access beyond end of device
[  595.129365] loop0: rw=536870912, want=132, limit=112
[  595.134610] attempt to access beyond end of device
[  595.141673] loop0: rw=536870912, want=133, limit=112
[  595.147969] attempt to access beyond end of device
[  595.153305] loop0: rw=536870912, want=2174, limit=112
22:23:13 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
clock_gettime(0x7, &(0x7f0000000240)={<r1=>0x0, <r2=>0x0})
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000280)={0x0, 0x70, 0x2, 0x4, 0x5, 0x79, 0x0, 0xffff, 0x20, 0xa, 0x8, 0xfffffffffffff800, 0x7, 0x4, 0x200, 0x2b, 0xfffffffffffffffc, 0x762, 0x2, 0xffff, 0x3, 0x8c89, 0x100000000, 0x5, 0x9c5, 0x8000, 0x9, 0x3, 0x8, 0x4, 0x200000000000000, 0xff, 0x5, 0x1, 0x52fe6ec9, 0x7, 0x5, 0x2, 0x0, 0x100, 0x2, @perf_bp={&(0x7f00000001c0), 0xb}, 0x2330, 0x2c9b1740, 0x6, 0x0, 0x9, 0x7, 0x5})
mq_timedsend(r0, &(0x7f0000000040)="3b74444fdb83a55bb693bd36bb65e07b33c6a168d1d4cae90fb0d94dab75111586187057f1232a7d46c310e95b1cfd289efdbf7dc2f6e5110f8c96f9c96c944e05186fb07624f302077ab27bf34262e50dbf9d3d71da0dcf5000b5fa03fcc23220a0c6846fb6d1d9fb80edb30aa09ffaa5f6ca7b65fc1350b40b27f17332353b1c2bec8b605cef449e2984a8ac380794e5f01c48ff5125b66df97e6096b9ccb54db6f22903844c4ac6d5bbda041059f638b1e51d5c8006df04ae9a3e10e0f7f22c7f8ee64fca127e77b714", 0xcb, 0x98c6, &(0x7f0000000200)={r1, r2+10000000})
r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x400000)
mprotect(&(0x7f00002c0000/0x1000)=nil, 0x1000, 0x5)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000440)={0x3ff, {{0xa, 0x4e22, 0x9, @mcast1, 0x2}}, 0x1, 0xa, [{{0xa, 0x4e20, 0x2a, @remote, 0x4}}, {{0xa, 0x4e24, 0x1, @remote, 0x82}}, {{0xa, 0x4e24, 0x400, @ipv4={[], [], @broadcast}, 0x81}}, {{0xa, 0x4e23, 0x400, @mcast2, 0x8000}}, {{0xa, 0x4e22, 0xfffffffffffffff9, @mcast1, 0x9}}, {{0xa, 0x4e20, 0x6, @local, 0x1}}, {{0xa, 0x4e24, 0x4, @ipv4={[], [], @multicast1}, 0x7ff}}, {{0xa, 0x4e22, 0x6, @remote, 0x3}}, {{0xa, 0x4e21, 0x1ff, @mcast2, 0x7}}, {{0xa, 0x4e24, 0x7, @empty, 0x10000}}]}, 0x590)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc0109207, &(0x7f0000000140))
mq_timedsend(r3, &(0x7f0000000300)="6b50dc276f81e8d2ac7ca4b5ce40e0aabf51798905e8dcd8bfbba644508274f8e778ba54ccf86efb0b742fb0817386a5297f9de18201580d001a21c3b33caf463837ff3241ea5be29d6e4b162962421bc5c3e8957b0c7b55924d52ccddaddcf7c3444658c3eaf5ca76fc2435d171f82a12c880d83aa041637f71d1528f39284bad9615fb8b1996e6836d4cacb11f139abdd64ab035ecc1551eedc3c906f0d49c1840b41bf7a6f9bb8721f34b9e7c5455db506ff3d82e38c64c5ccdb19a26130ca770a7398cfe3047d7", 0xc9, 0x72, &(0x7f0000000400)={0x77359400})

22:23:13 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:13 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc8070014")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:13 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:13 executing program 5:
ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)=""/80)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x2, 0x4c0, [0x20000540, 0x0, 0x0, 0x20000570, 0x200006b8], 0x0, &(0x7f0000000040), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x40, 0x6060, 'dummy0\x00', 'veth1_to_bond\x00', 'veth0_to_bond\x00', 'veth0_to_bridge\x00', @random="92c1ccfd90c3", [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0xff], 0xa8, 0xe0, 0x118, [@cluster={'cluster\x00', 0x10, {{0x10000, 0x5, 0x80000001, 0x1}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 0xffffffffffffffff}}}]}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0xc}, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{{{0x11, 0x7b, 0x0, 'dummy0\x00', 'gre0\x00', 'lo\x00', 'yam0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x2e0, 0x2e0, 0x318, [@mac={'mac\x00', 0x10, {{@dev={[], 0x13}, 0x1}}}, @bpf0={'bpf\x00', 0x210, {{0x1a, [{0x100000001, 0x8, 0xd1}, {0x7, 0x1000, 0x6, 0xf58}, {0x1, 0x3, 0x1, 0x8}, {0x80000000, 0x2, 0x7e7050fc, 0x3}, {0x8, 0xd8e, 0x7, 0x80}, {0x9, 0x100000000000000, 0x9, 0xa1}, {0x5, 0x593e9119, 0x7fff, 0x5}, {0xa54, 0x7, 0x100000001, 0x2}, {0x1, 0x7fffffff, 0x9, 0x48000000000000}, {0x1, 0x8, 0x1, 0x7ff}, {0x6, 0x46, 0xffffffffffffff80, 0x2}, {0x0, 0x0, 0x8, 0x86}, {0x3ff, 0x0, 0xbc4, 0x82}, {0x0, 0x6, 0x8000000000000000, 0x9}, {0x4, 0x1, 0x1f}, {0x3, 0x8, 0x64027adf, 0x7}, {0x3, 0x7, 0x7, 0xca}, {0x1, 0x2, 0x3, 0x3ff}, {0x0, 0xa521, 0x21}, {0x4, 0x9, 0x6, 0x8}, {0x4, 0x401, 0x7c1d, 0x8}, {0x8001, 0x2, 0x8, 0x1}, {0x4507, 0x5, 0x21}, {0x5, 0x6, 0xffffffff, 0x3}, {0x3, 0x3, 0x5327, 0x1}, {0x8, 0xffffffff8ed9446e, 0x7, 0x8ef}, {0x2, 0xe81, 0x2, 0x7}, {0x2, 0x40}, {0x10000, 0x9, 0x4, 0x20}, {0x6, 0x3, 0x8955, 0x3}, {0xb0, 0x7fff, 0x7, 0x40}, {0xfffffffffffffff8, 0x5, 0x9, 0x7fff}, {0x5, 0x4, 0x1, 0xce3}, {0x8, 0xc, 0x59, 0x1000}, {0x602, 0x3f, 0x6, 0x7f}, {0x10000, 0xfffffffffffffff9, 0x8, 0x1ff}, {0x4, 0xffffffffffffffe1, 0x697e, 0xb6ee}, {0xed1, 0xffffffffffff0000, 0x0, 0x6}, {0x7ff, 0x6, 0x8, 0x47}, {0x9, 0xffff, 0x2, 0x8}, {0x7, 0xf, 0x3, 0x6}, {0x3, 0xc3f3, 0xaaa0, 0x31390000}, {0x3, 0x9, 0xc4, 0x1}, {0x7fff, 0x1000, 0x3, 0xffffffffffffffb9}, {0x8, 0x7, 0xfffffffffffffff8, 0x5}, {0x7fffffff, 0x1, 0x9, 0x4bb4}, {0x80000000, 0x9, 0x2, 0xbb7}, {0x81, 0x9, 0x5, 0x4}, {0x0, 0xffffffff, 0x6}, {0xded, 0x8, 0x0, 0xeaf0}, {0x5, 0x4, 0x8, 0x1ff}, {0x8001, 0xa140, 0x1, 0x400}, {0x1f, 0xffffffff, 0x0, 0x8}, {0x5, 0xffff, 0x8000}, {0x6, 0x4, 0x7, 0xffffffffffffffc0}, {0x0, 0x7f, 0x0, 0xff}, {0xffff, 0x1, 0x1, 0x10001}, {0x0, 0x1, 0x7, 0x9}, {0x75e6, 0x3ff, 0x2dd3, 0x9}, {0x7, 0x8001, 0x1, 0x6}, {0x7fffffff, 0xaa, 0x400, 0x6}, {0x1df4, 0x7ff, 0x7f, 0x3}, {0x2, 0x1000, 0x8, 0x6}, {0x0, 0x8001, 0x100000001, 0x3}], 0x8}}}]}}, @snat={'snat\x00', 0x10, {{@random="0b523c64d45f", 0xfffffffffffffffc}}}}]}]}, 0x538)
r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x4000)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
dup(r1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x200, 0x0)

22:23:13 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:13 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xb4d, 0x0)

[  595.383870] 9pnet: Insufficient options for proto=fd
22:23:13 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:13 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

22:23:13 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:13 executing program 5:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x7, 0xfffffffffffffffd, 0x4, 0x2, 0x3, 0x1, 0x33a, 0x38, 0x91, 0x7ff, 0x3, 0x20, 0x2, 0x0, 0x2, 0x2}, [{0x0, 0x2, 0xc93e, 0x80, 0x7, 0x0, 0x9, 0x1}, {0x7474e551, 0x6, 0x92, 0xb2, 0x3, 0x10001, 0x200, 0x3}], "97bdcfa6d7f848ac0b8284e59046fb926a90064e334819b99de78dfda3977ded86d0feced234b6e7f0f212bbe4795f4e1e913de071779fec8b5f78966c9bd16b6e5fb37d5a9f133c04551226364ad630bd02d40b92057804744071b798868b58e89b7a1f67802705560c0f86b5f4e45671d7ab1bbd416c255cb7a7118368effbb72edf15f8474b9610b44ad98b8a08004e44c51940f641cb81524d7c5bd4a1a8803d92211b41bef8538de2a7b685eafa276b6837239f19c06f708e70aae9b53bdb8e45a7871e37f6795446a92812bc0b8d0c619c9ff04272a95b372b1ffe132a10d656274238dfd8f56aaa"}, 0x163)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x6, 0x0, 0x1f}})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:13 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:13 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc8070014")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:13 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:13 executing program 2:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000), 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:13 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:13 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  595.595214] 9pnet: Insufficient options for proto=fd
[  595.602578] attempt to access beyond end of device
[  595.609687] loop0: rw=536870912, want=130, limit=112
[  595.615654] attempt to access beyond end of device
[  595.620682] loop0: rw=536870912, want=131, limit=112
[  595.625982] attempt to access beyond end of device
[  595.630975] loop0: rw=536870912, want=132, limit=112
22:23:13 executing program 5:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000001c0)=ANY=[@ANYBLOB="62726f7574650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000001fdcd8ac428deb9e60000000000"], 0x88)
r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381)
r3 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x840, 0x40)
openat$cgroup_subtree(r4, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0)
modify_ldt$write(0x1, &(0x7f0000000280)={0xd341, 0xffffffffffffffff, 0x0, 0x7, 0x7fffffff, 0x4, 0x8, 0x3, 0x9, 0x7}, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$RTC_VL_CLR(r0, 0x7014)

22:23:13 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

[  595.658245] attempt to access beyond end of device
[  595.670423] loop0: rw=536870912, want=133, limit=112
[  595.675955] attempt to access beyond end of device
[  595.682049] loop0: rw=536870912, want=142, limit=112
[  595.687322] attempt to access beyond end of device
[  595.692420] loop0: rw=536870912, want=143, limit=112
[  595.697890] attempt to access beyond end of device
[  595.703238] loop0: rw=536870912, want=144, limit=112
22:23:13 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:13 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:13 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f76")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:13 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  595.714833] attempt to access beyond end of device
[  595.719901] loop0: rw=536870912, want=145, limit=112
[  595.727050] attempt to access beyond end of device
[  595.732143] loop0: rw=536870912, want=2178, limit=112
22:23:13 executing program 5:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup(r0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0x3, 0x3, 0x7, 0x2, 0x9})
r2 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
eventfd2(0xfffffffffffffff7, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
eventfd2(0xe9df, 0x200001)
prctl$getreaper(0x2a, &(0x7f00000000c0))
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

[  595.791021] 9pnet: Insufficient options for proto=fd
22:23:13 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

22:23:13 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:13 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc8070014")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:13 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:13 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:13 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f76")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:13 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:13 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="2f0000001c0005c5ffffff000d0000000200001f01000000ec0002c91300010000000000000000005867000043050b", 0x2f}], 0x1}, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:13 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:13 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  596.033404] 9pnet: Insufficient options for proto=fd
22:23:13 executing program 2:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

22:23:13 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x101002)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x2, 0xffeffffffffffbfa}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:14 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f76")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:14 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

[  596.180563] 9pnet: Insufficient options for proto=fd
22:23:14 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200000, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800c000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="00e631a0fded9047cf32e47cf713450328bd7000fedbdf2525000000080006002a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:14 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f7640")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:14 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

22:23:14 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

[  596.412516] 9pnet: Insufficient options for proto=fd
22:23:14 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:14 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

22:23:14 executing program 5:
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$clear(0x7, r0)
syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x101000)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x100)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:14 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f7640")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:14 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:14 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

22:23:14 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f7640")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:14 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 5:
r0 = getpid()
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x80, 0x20, 0xfffffffffffffffd, 0x5, 0x0, 0x50, 0x11000, 0x8, 0x0, 0xe0a, 0x4, 0x2, 0x6, 0x7df, 0x4000000, 0x3f, 0x618, 0x10001, 0x5e, 0xe, 0x674, 0x20, 0x9, 0x7, 0x7b7, 0x1, 0x7, 0x1, 0x40, 0x1, 0x5, 0x9, 0x4, 0x1, 0x8, 0x6, 0x0, 0x10000, 0x2, @perf_config_ext={0xff, 0x7}, 0x8000, 0x7, 0x0, 0x7, 0x7, 0xffff, 0x9}, r0, 0x6, 0xffffffffffffffff, 0x3)
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:14 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:14 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

22:23:14 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:14 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

22:23:14 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 5:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000140)={0x3, 0x1c3d2673, 0x0, 0x2, 0x6, [{0x7, 0x3, 0x2, 0x0, 0x0, 0x1004}, {0x81, 0x1, 0x9, 0x0, 0x0, 0x104}, {0xffffffff, 0x9, 0x1ff, 0x0, 0x0, 0x1207}, {0x0, 0x8000, 0x3, 0x0, 0x0, 0x80}, {0x81, 0x3, 0x7, 0x0, 0x0, 0x80c}, {0xffffffffffffff2d, 0x1f, 0x6103, 0x0, 0x0, 0x1}]})
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000040))
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x800, 0x0)

22:23:14 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc8070014")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:14 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:14 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:15 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc8070014")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:15 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:15 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:15 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:15 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:15 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:15 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc8070014")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:15 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=<r1=>0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x2, 0x3, 0x4, 0x1, r1})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x91)

22:23:15 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc8070014")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:15 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:15 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

22:23:15 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:15 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:15 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:15 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:15 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:15 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  597.546108] 9pnet: Insufficient options for proto=fd
22:23:15 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f76")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:15 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:15 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:15 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
fchdir(0xffffffffffffffff)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(0xffffffffffffffff, &(0x7f0000000400)=""/240, 0xf0)

[  597.684336] 9pnet: Insufficient options for proto=fd
22:23:15 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:15 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f76")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:15 executing program 2:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:15 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:15 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:15 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:15 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xa0400, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0xa, 0x10, "b714182bb3cfd28a28449c6eff94b3b45b5ec096683366d879958557ae0afa4231e48f9fb84b83d2d0506d63b0bb03f8619aae34c45a277c9bcb1e9c947d860a", "5f93ff455e0141cd75eb997cdfcd302ede9d47831bdb8123d3f6c461a6ae879631af24d423fd3d9f92942714bbe5e63ab6d92ac3bc34de2f2131404f2c62b327", "3b1eacef2cb7aea773b844e8eea2e5f301fc56e00be0850e41d157714f678e34", [0x1, 0x100]})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:15 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:15 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

[  597.864632] 9pnet: Insufficient options for proto=fd
22:23:15 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f76")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  597.990342] 9pnet: Insufficient options for proto=fd
22:23:15 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:15 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
dup3(r1, r1, 0x80000)

22:23:15 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:15 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f7640")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:15 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

22:23:16 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:16 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  598.130066] 9pnet: Insufficient options for proto=fd
22:23:16 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:16 executing program 2:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:16 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:16 executing program 5:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x40040, 0x101)
accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14)
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000240)={@mcast1, 0x1b, r3})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
fcntl$setflags(r1, 0x2, 0x1)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r4)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140))

22:23:16 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:16 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f7640")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:16 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  598.277973] 9pnet: Insufficient options for proto=fd
[  598.290655] 9pnet: Insufficient options for proto=fd
22:23:16 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:16 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:16 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

22:23:16 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000140)=0x5, 0x4)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x100)
write$9p(r0, &(0x7f0000000180)="1850d1f61ec6f3e719f085288ae764192102ad353e4bc099c6aea22d0b7acf72cf6a6c17f7249467662f137c7f938bc4f624adcd6cf8a056783d776b7661e206b33558d520d26b962475de", 0x4b)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)
r2 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x40000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40, 0x0)

[  598.406229] 9pnet: Insufficient options for proto=fd
22:23:16 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:16 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:16 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f7640")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:16 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:16 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:16 executing program 2:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
fchdir(0xffffffffffffffff)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(0xffffffffffffffff, &(0x7f0000000400)=""/240, 0xf0)

22:23:16 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  598.540191] 9pnet: Insufficient options for proto=fd
22:23:16 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:16 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:16 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:16 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000039c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000003ac0)=0xe8)
sendmmsg(r1, &(0x7f0000008a00)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="97e10cc6d92d6950e6b78ca05db92da02fc1ee10cbf9c35a62017e5188dbd3c4f45e43382d36d3a4260a829bbff85f253b66ffe1ed449d69e6961c7a3e0c0849686c2e2cc643870e75ed91c119bd97d4d70cc8b41bef92b2447af1aa5a6b881de7a97723447baa29e4", 0x69}], 0x1, &(0x7f0000000540)=[{0x1010, 0x109, 0xd0ca, "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"}, {0x30, 0x110, 0xffff, "eb9ac14ae569e6f8e231ba1645b5ea11f8ca40ec70c77632c204d1a371"}, {0x68, 0x6, 0xe5, "338a2a1c8525c1f2ea35c6eac63d28547298679aa6412e6ab9b51132ebfde0f81f36e8b72a87ebf702702721542d959b6e5850fecf28071a833be949ec5ba6c9473992a4c591cbd4ea03ec2803caa9dee9663b1f22"}, {0x1010, 0x129, 0x1f, "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"}], 0x20b8, 0x4000}, 0xfffffffffffffffb}, {{&(0x7f0000000340)=@ll={0x11, 0x19, r2, 0x1, 0x8, 0x6, @remote}, 0x80, &(0x7f0000002600)=[{&(0x7f00000003c0)="bdfb20ffb97cf075fbcef7758374f0a3ab4e050648b07899103a06f4c449552c8f2897cd482922ac7ccce0137a3e8009080ede", 0x33}, {&(0x7f0000000400)="a6208f862de40393d413d8", 0xb}, {&(0x7f0000000440)="3a868ab15f21fc48a7e394cba3da1afec05af52328f5b4", 0x17}, {&(0x7f0000000480)="ffd080", 0x3}], 0x4, &(0x7f0000002640)=[{0x60, 0x103, 0x3f, "404e5bae73bcf1e6b2a782b5f428ee7d54be56cb082924cf2e1dd77eee1fb2eca842823f04fb4abe2075777adf8e651db334eb7e79e8a54fd3ba36c0c2776831389367d5a42910150a"}, {0x10, 0x0, 0x9}, {0xf8, 0x100, 0x6, "626df2d7250174e0375fc1e5a4460c4a17784ff83dfdd5504e2fe35aef81d7b87a43c5c8370fb5819917f324dfa00d7934908601faaa1b38a80db2821ed31026fd39acff30bc07fdfa2c424e411e00b94f1c0b7e80121f96a55583b3c650ec2c1043a7d0fa32696bc83596fb83562a5b1db3cc2078da71b792849e4348550b1f42b1e326a8774d81de049f53cc2b141790bbed7e22ea7b0d3cf2226b940c64c231d183c842287bbf25e3323a013e82b8523ee157d823d31cae9bcb4c4ded0f7d03cca796b31696ad100fb72ac94be3a331069c270e93f634d297f1174a43ed9366d1c43617007b20"}, {0xd8, 0x0, 0x5, "b80274460008de6e20b8165e81e00e79520a75d51d3fba2bff6879c52828f39130ef581f6246d1192816c6875c77731fb54edc233f0d98abb78800691e543a3b15e8609c719271c3e67a5e2b371c32ea3e1a90e0e31a7161bea0773599e9b4dcc61a2d576e836a3522b66a16bbc9c1f5551e7c24db2c62f29f04c11fcfc77d3c4bbe30cc7c125b503b6b8b4d40968a41d6bb887c0e6e3dd7d1c85abde588dd3698038e5d724161b59b00c05285a8058d8c8ae5f4a55e6cb1e8412771dcbddd5b410b8abd0672"}, {0xb8, 0x116, 0x8, "65ce0bc16b52615326b6a9a9695893300c89f98c9947eaaa855326f2b053fc43c52d4f430aa35e990eec95b1713f6615881a04c836e781cce5bb5a8cd9535c462774574cb4945bb7522a129ec906039603a24087ca93740bc2552338a7e300a6e1b0e3db0061e585d51473d4e6fcd3f153ae1a6b8f572b8c11945dd7d4235514fdb37d19992fd96815edf790691274cf97b27b75d8e0de89a75a59a42bee824c21ce9d40"}], 0x2f8, 0x4001}, 0x3ff}, {{&(0x7f0000002940)=@ethernet={0x306, @remote}, 0x80, &(0x7f0000002c80)=[{&(0x7f00000029c0)="f343f68741c10213f53f81feac72435f4b2c5bb9cb1ac7d7b5339847174a8953e62dcd0c8516e298344a64703b8ef8ea41de523ff721990a0bf7143b03c1359b07785e09ce20031105bd27723a0682b08e2033a5855831ef849cdd0af3d7c5faf2fe7578d5e2f0b0a104e7c9c8af24a6f31dc56b8dfeb3ac712d85b09b8c31572abed60197e60ce346f0b1a7a6b018f55ccb5b0cae8508cb2f7088b009531d765f8cd9830762ab39f49d6140841b7a80ed848b8631ad7ed7f26ff796b71dc62bbd18d39039c218e5316b0b775496fce3fbcf851a1ccd0027c419a20e4788ce0455114921ed21a1275093189b0a8910d31ecc53e1137d1127bda3", 0xfa}, {&(0x7f0000002ac0)="68e4e0bd8fb8289626958722719b8793d73319d663129731c356a962b067d1f3c293eda28b83488ea4093558b8994e09a8d5eb0188801782e84b3110f0a2cecfa65e456300fca813344d3f152fe624772ea2c6f6bbd73fdc4619de33dd82d082c276710dfecfb6bde75c13ba6b920a1ae1c59f1fb7d88653ae6ee67e0e1445497f64afe4f878c5caf91a8999a1178cf16284cd58c9077bb35dd8f197a0", 0x9d}, {&(0x7f0000002b80)="82935bbbe2fea63300717d91c93782d2dbd7c0fdc6e0b820098f915b37d33c880bc6d7426c314081ce4c5ffcc1e295ce91a4a3b3789dfc7ee81954c7e01b19ecd75d0ff189bd4e2ccc4290244cdc58745960729b6dce5b15df24906229f2e407245e60", 0x63}, {&(0x7f0000002c00)="7b02cdfac3c460ec281f88fb727c57b5a38c8b1ae9d4aff2b2c9c613a46b90f1aa8768ac2e76d4c3fce0413a08b08a7e0b9ef717255685ab319977d8b1032e8f2d760363a3b7e971", 0x48}], 0x4, &(0x7f0000002cc0)=[{0x60, 0x10f, 0x2, "7a9b9a9029129f08049dba3ab25e809e482dd4725f817cf505d6bd3a5a8881d8ae34c8ed04d921656b18864d85e40b6991071ac9728581d7774ef0c34bb7bcec92249491b65390b39720d5d028"}, {0x98, 0x117, 0xffffffff, "150b4a02314cb959a36c1566148cc6b39cbaefc45530f6ec7f42fc3bba0550baea7e3589f7ab0ecdff0c6eef67466a1ed5fbdd3673fe16cf25370ed1cdc0938876054d54185bda524a5c54bc65097dac7de8faf9a7df1c41cfca56c753258b3fd8e09acc0788ffa8419c535c1fb53f1939a814cd771cc5dd01b9e15dbd411aaaa14f8bc030a28479"}, {0xe8, 0x0, 0x0, "b5df8f55bfe539c77ed53e4a358261c1d74d5b805816e0b4dea614b55a596e795af6583cb9281ed49c0d3617bdead322db00cdd1e322d748abdd3c4452440fe3a8614082e82d8b0d07ec623c0d82f7506ca1076407cd579ba1f7bc97412bdf1cda4eec6b5fec0a2ca8547bb52d8233798edbad10045663b294c77a25498214f9230a19b9ef33166c5dd8a7712f6e8b53bb72c84aa9df64d2fe5011810385b569cf77ad4fc2a5295698ad867c59a8eeeb2ec5e4b2265cefc1bdd75c344f53ee435803f48819cc58e31493d68e40e13ea944c9b319b16eae"}, {0x58, 0x13f, 0xfff, "114c603519a5e1d5fa4a959f2a9b2a0cdaecfce4149e7a7bf151f84efb5e44833ba435e3759bf171b9456e93e20e0a5250297b1cdb41a106c59cb1ccd6c52ffe83e457a2fd"}, {0x48, 0x11, 0xb7dc, "7e1299ac0ba7bd7d7e5bf49961b3ff379a0e8410b83886da14be8526df99180ac7ab85410ce1b4ae21dbc846bdee71eff4ac66a5c6"}, {0x20, 0x10b, 0x1f, "91a39e90870727fca13f88"}, {0xf0, 0x117, 0xfffffffffffffffc, "819395d9a3d908f8ad5613716cedc7c39602dbfc035a93c2650cae374eeb2963da0c0d3f0fc1ffedf5fcfabdd9b8129e1cd2d769fa8e5b3541427270c5f87aa86354f47df899081fe4109eeef19a435898a01ad5e1b6ce08865ca2d46a14f3e62e94cf2fdfaae8b810622f5b50b4b3a2bbdd1d152fe97f2535c74e2e70f237e0fbcfa4cce3593e2b1ac177b33ff2b8c4ded1ad6bc2a8d75ad828235e7794fd267bdcca067edafc75a0a934a4b7af240b1817d603a5eed5b629baf8403845e846ac064133aa79f008bf1cd4d502e6f782bb5c75805c743b1a7021a760"}, {0x28, 0x10d, 0x3d2, "128102b3fd503b78285962d1019a722e68eb4a6dc44c7a"}, {0xe0, 0x117, 0x5, "c7d5ea379787ea048ae64544e16dff7baeae1264aa5e05c2e2f8d75246ff215216dae0a266df915c4087cdeb6e0ff24b5fad51a13338e89ee6d18d04a815257458dfce9da0ebd7d1df47396b6153c8c37470ec42abc45b1d5584a558641dcb2b86f96d189a6f3fd783bb5ea48e9adf6c51f1192810e7f20fcc616e33dd073f0220324204c9c621dc0d4e10ad0c58dc897014badd840724c9352eb0d483252fae86c862f57d28d8d5bf96b7c4ec49d5d5c3d9868caa6fa1b741712eb2c9c2b30dcf96bbb336393efb01a0772db4953ea2"}, {0xa0, 0x6, 0x3f, "afc464968dfce9016baebe47dbde558321c0fb83cd15e047508af97c9dce8c6de858361884c715f6f22b42cad5354a84e34b2f7a5a54d88e22bd719ba989b0c6df5cec34ab00f0bbf418587fe08b28b6c6c436f3ceb9bba1181ff435c7e310bb96797aa195eaef3559c82fd92727d088ea684b51ec57a214197a217e6daa832142630faadb34e15db405"}], 0x538, 0x24004000}, 0x37}, {{&(0x7f0000003200)=@nfc={0x27, 0x1, 0x0, 0x7}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003280)="72e52abdac2c1a165a06e719cdf0687a7861aefd351da83e9f17e57edd0a82d282f1dd55dbabbda7059e41a07cfdab0531138d392f664dbecc705badd7fe89023c4089f2933208e3c8e5f9b558ce56b556d2617f387e0e9eba012c62099d8cbaeb737efe91299a12e15c30809660a4b771cc906c5ca21152a0747a429f82f110c4ff5ade38d8490c08e0c374ec0a4c4f3056be85a579cd112ae62401facd0ddc0b65d8dc8a27600f35ae66ccf1ef4d064f", 0xb1}, {&(0x7f0000003340)="9e695b6d5d2045e1bc30eba90981345dfaa542708a4a571c80cab51b18c241d9aba164260953f0c703af638a588a474507120a05a82ff1ab25383d1d3f5443764c760cd1bdd4e47eeb6d84cff7877bcbdd64afcba09b06cb98df8d93a2904082caa984fefa5d9371496c95b4dceb65", 0x6f}, {&(0x7f00000033c0)="c2913afdc2456f499ba83508ccef0977c51b8240636343d03b5c69fdf64a3c9e202275191f3ba338b51600aa347e4453b9b50f1631d893050d3558c6c910afe6865c4843cc6bd6af87394b13824d68fb2769ff5aa999211dc96c", 0x5a}], 0x3, &(0x7f0000003480)=[{0x18, 0x109, 0x400, "5290c0a7"}], 0x18, 0xc040}, 0xfffffffffffffffe}, {{&(0x7f0000003b00)=@hci={0x1f, r3, 0x3}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003b80)="d4b4ce8f7af7660e1abae7bdd4940d3dd7f27124f034e3307aeb44a55afdec27f1a87d7fd6d5581671e8be4919a89c89c85556a17d8b13c52299dcb18684ec426799d3e0c1d554d2369428a07603cbdaeceee10f040c57ffc8738f5e3cf17fd3cb691c19f260f675b0d028780ee4032e9be85ab1e9b3ba090bcd0460a244a7e41104f8ea399e1a7571677b1f3089a129bc26c31f7cfd428e54cc00307346c3215b9b30a636664660df03b1", 0xab}, {&(0x7f0000003c40)="02dcd034830ec117a086f34a457d430b62b036e5e49b953966876c2c2e2f7704699ca93799af64d0cdbde459347079565f61857c218698432872fb943fc6afd70a11eb4e3896de1bc9f1fdc01af02022c686c0a2203e37b2a95fa9325b926a94c6f1ae08f5fab04baae30f189bee44b77ad77ec822", 0x75}, {&(0x7f0000003cc0)="a4bbe9fe493d2d1e51fb621231459845838538e36ffb3004512cb3a231f84602c6b5c9300476dd52fdfc91beff3c7e51cc2e5a23cabd10f47edab2977a87f4aca7e49aeba159b41229e5757dce29fd8e625ff5aa529c36cbd2d0763e2c5e2dcafb855cef11d7bd0dd7685f292574673cba75fa847268b2b7bd51ab1643dc61675732144338894b44832cfcd337", 0x8d}, {&(0x7f0000003d80)="c3ab439b9f27a9146007fc5f251401efe5719edad107cd92e63f32cbaf908e7ebcb203d2bed4be2689b2e067f5fbfb68d6a8d51f4da400b5230a6fd735d029a294104d5220da5336910d99a1daf8e3ed2dc7825a4c078526c0a7bd9889fe07d90e5e7b1e1c0c1af29f642dabe9e9f28328ea3ef3", 0x74}, {&(0x7f0000003e00)="371315cef3eaef259ef085f65301f86e398e92b66e3870c2eb5e686a7269476eb8406b63b1be9e3203defe7221e1d507006c3ae83ea76672cdcbf849323d75ddb17be5888b188a8aebabe5e18b1415d6e6fe0f0f150d67264ca8d363bb76669211e54f746f593e9482ffab550f4b7e89ee894492c4aac7c3f85528110e483018", 0x80}], 0x5, &(0x7f0000003f00)=[{0xc0, 0x1, 0x40, "32dcb7c8e887350300c73d54a66623a1b94c704f2122450b2bfb0d6eb3d9992ba8e69f0c2d352ae617ddb38978b85acc78442550dd57125309231cbf1ae5d3ea64741aa430286ace9032d001cfd8fa57ae32248b74ac94ea6ad65d07a505ce4e76a49185c9322257f37e6d9a9c1274e5e84b4b3c91f70900d6e382995754f5a8224c87f0b06a752f796611ab3733ae694f963834e9669cc75987a959c97a325c7029615ed96231e97260be713b91a8"}, {0xf0, 0x116, 0x7, "ecb05b6c7d16a32c425510ccf6325f5f0ae1acd4794fa1ca895d5204054f0b72283eacbf922c589b9ee562c315377b27118b36da85c5601e3f50f5664187412483aa03414a21576b3212ee288f87036e1fa61ff9d1934b0e9ad3356bdb116dab81cef03ae209c6194c0ce8a61bf3f2bb4a58593a39ae5ff51bb9be5d19059e89103c511ac5332d5550ebacd8089aa8be6a4d007e267217e82e9dfd66e8b45566a1c8bf45c57b1c96f6d5dc38ec7ca8f40f7ed84dec17a3a81f7d71246b0865ee06830cec564e1646a3bd0971c544d771f6d2dfea6fff2a14f5c7"}, {0xa0, 0x10b, 0x8, "b3404781008929ea6ec5f6003ea1526a978791fc8ca877ae881f8020ca727168977f990cc7eed72e2339cf2eacc3d6a3df946855967fc28c24e1c425494f2f7f9d5a6fa3a3c3f797e196bbbe44e2eb290b28fc9fc1e30c9da22e78e83ac6438e15d9f7e742f4475061a12ac5e98bf578ce3a945494e010c3690d17131cf8aa91cadfb21f5f2371ba347beb277a13a71b"}], 0x250, 0x11}, 0x8}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000004180)="fadeda59e58ebeaa74a5a847a1acca4850d335a643d64175856886b601c323d4556f71ece5992249c4e565e5ed1eb7552dde1c66ace81dd5e36725fd5a3187d4ef1ded8b2685424b8ebf89", 0x4b}, {&(0x7f0000004200)="96ee7ccbba0d85a4b11b8f8bc90de7c9d898e1951291facf43ea8e89106b7d657e88697f354b608b3b9f2f33adb45f1b5ae06b14ff590f9c55df72303afd78ba41d81348e00b04aaf47ff4123913c01a43cf058f4570fa348910", 0x5a}, {&(0x7f0000004280)="07b33d8f57f49fb060dbb6d108d8f23afc2c8148338318cb8c44f3855a580feb446b760560625a9b84b5c9a682c9b25724e1bb62a104b29ae662f6e5ddc197e9f1dcb99c6c771dfda57e0b1a817da8bd7675c084865d4fb9c067adc566e16321e2a2330572b774d731b9601f46adfefa690ce9cee3d14df3531580c89a4274877491153d0531437a7469438030a8bd1dfa5141f75bca39241e19ff70720269e2cb0d40f14dedd12c4958263a857b5e054c1ca3a4f820feb81dd4d2b8d1066c7a38a216827296022f9591b76ce72b182b87765432bbe42a313f7a10dca7d196040fe6a1", 0xe3}, {&(0x7f0000004380)="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", 0x1000}], 0x4, &(0x7f00000053c0)=[{0x50, 0x19f, 0x0, "69b614aade59f3a2de0cea13772feb24eddaef4d90839796f761923557874e481c084d1d6b18471bc1b509815079ab2e05e9cbd7c6f5347631923cc0a9e27e41"}, {0xe0, 0x1ff, 0x7f53, "acc86ed8e7ca6f8e9c8295ae225a8d17bd8b10f49ab00fbb4d9f5f6fb2dd327480079991a88ae3f7f72254552aeebe105e854bd2246eb0bf4b415eea4df296d76711b29e2221c4bee7e98e40c658e2e02fb7a648e3437c2f44642f7e47c090764859f31dc3f1db141126b9243cd79da523f3cb574e02c0378b5bd2acb9b94d2b749a6a7eb56df9f85243e2f7ffecd6a6346637a75e767992426324589b17e2464c36b109343b5ed6be1a7fe6ce35b0a4824e11494c9b476e271d7df0a81521bf34332d755ab119da064cf84d5e"}, {0x78, 0x112, 0xa8, "28b7f71958e74c9a747eb7d052c94d5f8309648515c63c4a5a58765c7a05d532918623840ddccad3e17723eff778f58e3b5fbb309b26e797ecc0d70a308435aad7f2f41f53ff3aaddff465832fbe2f66beeb52ffc381a6f047c147a917ddc0d5b5c0cd"}], 0x1a8, 0x4000000}, 0x1}, {{&(0x7f0000005580)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x2}}, 0x80, &(0x7f0000006800)=[{&(0x7f0000005600)="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", 0x1000}, {&(0x7f0000006600)="15a19d33e2f6cc38aa7323ac8ba08961f78a6cb93709cfd0eb7a424cd48a1ab1723ac30869b305106486a1518bbeabfd20e860277f8582d947bc2910316384a77f32c4dad626c2916f61d88d11fe95949b5be36d9df75abbd8c3a135d01ef7fd8d9de95d0421ef853249d84b8ca7ac41d95323bdec0de728bff0b72f962b7e387279baca30f6214ad728f06f63fa75b82f2f6100baeee0ca61ff409f3bc431e5a4e23680870907d64723fe6aca74997866", 0xb1}, {&(0x7f00000066c0)="e7373753ddfebe0bc381f32bc26b2ddab648d15729a4fd8e38d07b8a655cce043bdb1f632fc14a70ab6d804d6e4ca4660fe63f5471192f6d32adbbfe5701d0b735bbe1a40ab03ee935be21af3e9ec8ae4d", 0x51}, {&(0x7f0000006740)="390cfad38b205946f5ca2ef9c283f4f9ba7c1acc093364afda53ca5d5b6247e0d663c546ff7322a05fa60159b0d622c6bcf0cd058850def908d4cb0b1e4eddeca023e259512309c7eb3e031081ff7ea137f236086f5d2b47b8cc3654c11ffa3079deb5c17956b97e0fb7eb2de791b17a3b99b1f672f80efd74d02be5dbf796721d611e6279", 0x85}], 0x4, &(0x7f0000006840)=[{0x78, 0x13f, 0x3ff, "55c90ee35ad9fa9108930319655b20653ea5134474c37d413299f14b4b745414993a659dd8f2eacde488cded1f6ba6fd0b18be75382aeafa047590b70569c6ae4c9a29beeee8aef46dc5109187a6355409bfad2b534f15b78e1c02c5cda63ec1fde46e"}, {0x28, 0x109, 0x40000000000000, "de90517ad8fb347cfd8dc9193908762b7c43fee89f"}, {0x80, 0x117, 0xfff, "530d3742882110c88b90246bea5293f4158a0f4c4a7be1956d081224cb392678a29a2979808de1df94997900e0a04363f64ad9e26559b5fafeb5a8af57a20df828ca006459f70e4ee1d43082f1af365145b78b9f1f5348fdb6bafb94b98b0d5a7c194b651d4873abfca3e96550a1"}, {0x1010, 0x1ad, 0x4, "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"}, {0x1010, 0x11f, 0x10001, "fc116a4089fc0b2d5140eb1d3694c683ddf1529f614b6341dd0e6641afbc8eff490a6c6bf7f468fbf6c0ff9eebd49a53e6e74d489c10dda7f4e2834192245a89717cac98c9d769bc5639b8b61f4f8253b75a2e1488c3a2eacd08062b6e6f90313d6a5ae5f2a11b10d117860a9b6e4d91f8b36ae5f0853b6e53e5d217a352a5ca32d3cc5373b438cd30c8b2c63d455d20b20e4c29efed3164de6adea588ff8724355aed095a2f55583142baf29c278864d9451a4051aee073a0f8950dddbf81a98b4b16cfa3d41071e54b326b39dccf98c62458b6b4f624b55372be0e4c88cefc3f54a910ae1160d5e03d6b7306a8061fe67deacb71b235dd04c1b3f6e610b04415588d487d7000b4624e9506043e9ef270f1322f27a8cfac9995ae250555ae67af61e4979dc1e1b077a5af5993589e2699476b2d12a79292055936758d67c32da4a3fd98257b241e29ae658e547441009f08775ec69bb43a6e9221784162f5204bc8d8664b435c2893e6d2157a3d90d00a8c1fa5f262bc8a993dfafe36c13ca8844c57943458be611aeed470fb65161bcf7f7c2047624b3ecdd479ef62191276c5e02802100403ff5041c82050782a547314f33f4351c680146ed1e70972f765be5841daee2c4f22c91d2e597ef130a1bbffb8544a9b0c0648984627ec9f78e2f8283aade50bf27f05b7d7473e5b9506eea2da4f7aa76c0a24194643d054576603ef4acfb41c2b566e1b517f0cfbca9b07a1199bef03e42b6f7151d250cea3bf617c78ea64d9b6a8a92d91fbcb84f0899e1b72231d2d9faaa2b41307283d5a727006473bfdc9981ccde215b6d64acfd8de4dc423d55b0269af40b02762d9503d110949015ad1c9057b59b0580d07e6d2119d6839b2af853936f92781d1083dd9da76f717995a5db24a98dce6d3d0142290d195f3a512ffb2439e30669556ef87987b1845f7b01ea178858b993ee46dc9d1f4f5b0c5b3efd007576c368fe1a967bfcefae5e05e6197989a796c555704f018283e315f299ba2079c35d2ac23bb627587532c0982693dcffb5f846d49c02af044512a9a166fd0eae45d5f47c67fca61dbab357ed0ff9d4dde0ce26a58b930ab1d309c7e9490cb4e04282e3f8ea456e71e71bc6f0075c976a2dd8baf1f6669e3ba332de1888f0a1a673bdd83998130dd482c21347e027fe70e2819af2f5c41f05ad2b8ee32a79dde80d9fbc6878ee4306c954293d61065b84547b46601ccc12f433970a9297e629b2a7eb6adbc6f9533f63505fa935ffcdee652bad9702fd62146a30abe2bed630c810e694d96feb8c68e69bb6fca302861a82c84dbd6568e900fdadee0abeb8d3499feccfc3305b892a95b40f421db83b6d96de7741fb1b4f3de73ed479ce9fad59299b02d91ff883d70bd72891d8ab591db0d3038c23f8be2f2a79a8e54c1361149eac19e7fc0860b1947622e9e16c012b204aed7711af3df551bee864550140c1ec5155462bd7889ecf71ec9cdb65ae97d5da6206f2f5f56a072bb587c07bd62bdc9c92b27015f921e671838d30895c1f2af7a3818a06fd2b898a7c8a18826992e51f86e06955f313a2986d51a8916b82f00e5f7912396864a078546770280d70a17988209c12e3da72e9d4a5fd2278f2c264a3b9d460eb1a61953329a3e01b1f2ed7bf834e39fdd6881a1d35748ba462137e5b41c6fdc068ab13f177233e06911d08f5e2b146798d91134b0a9b166e6e5f20cd4e2061756fbe30def7a5b127ddd5b3fefb2f98c2aebf60c47a54f3393b1796d8041b49059d264628589d0ce54c142a286274ad706fa379e4badf639bc9ce228a60b49917a00ca0c151e6e1d187fe8938f81d9d9c1da3bfb4de7dce9af868a1a6c5852d6a0c71e5748646fbdf71e500acadcd2a5e7aacc7c3ec1bad6b8c1413713eb52f2a4e348022fa8a4f2791f51f740b8e3024b7eed1777c83fd505a510bc512736407d62d6a81b65e6d81ae05e3f739be80bb4f8077785bb417822b495c7b7e972a4e871d40f26da69ec8fca0aa9e3bccd2457dec74ed135192610d90c9dab5476d3fab02170d47bf4273a1f1dfe6c4201a0499bcd441627d7ec25b1c536912aec43abd14aba5e2e0c4c91659b9fc84378390d8b01dea14f7739f9d09835af1f881ad2cef5b53835085cb5a21bc7047efa7a1ec38dd32cb6b2317781461d79ddb6dbe7e1d8184a363a2ad3bb68de5cacc3dc3bd541be2ef1a125f785665db34135ccb835c7829836e2b27b4836b8ac6ce090465e39a875d2190099044f88cc0967b4978e455bd0fff8cb1fa382e0b6d3725e0beb4677a04568b7a47ecd29685bacc257666d745cc8dd4cf3cabb651e0ea0bf2d75819f75d2bfd05677877eafa3fb3fab27b35ff48c79a335ec7ec0efb94804c34f890de32f6f2bde3f4542c2842ca0dcef8590f0595cb35461d27aa341b4a70d2336f68b5d91ac563b04148f8fd987eb502013bb18a7aef63d49483f53592aebd96f941a30569b79b7afd63c0e5229e027de3478df51282ce74c906992be66835470c90c81ef4f7ded87d0e3735b0005cf03a44560961b434711a4498d444eb4f81588c2fb9d210fc5c73dc162c319d71ee3303989041e0253c4560fadcd60b7af420f28e76a7664f5b5b6fa61fd3a62aac1bf3145a16ec2dba7d6b017e06eaecf2d9009c638b56702cc29ebff65ec5fd5f85c950e6381368d125caa41356d9c9262bb5c38b18cd27ee528bd71e540864bccc903e490b6efa682515a8148e2e978a3f121ae633264772391ac41abede80c51b8b58721e94a303686fba586781fca06fd592f2f6259641e23a2da813209e3cb525c7135ac8db47b78b0779a8d7ff2c8a6cefd91ca638b040032b2f8419bc0e8966e841de566836193930a33aa08a776af69920561023884f7e5df65b816a4c5444401a82a6e9bebf413e414a49cd2141acc1d4cbccd097ea3cf36d1ef1fffb374b7ce482e86ab649081399cd1a5d9fd8480b0c3feee9b88747598c8a02fac647a44304420187fbcb935f4dc1bfeef7eee75e37718f009f920b366f2c84f87e778c743f10c71d0e128d5afdca0c2a094264d37345b079debc59de00eeea26315faf13eea2dd4083792959e012c9fc0f3419c1de52abb3e2f4f5ac136e0712ed374f11a7983d5e757da641ea0b7d82e83f2fe1e3ec66817599fe1a768dedf8c3f62c5367b232c15ca3d32429aafa78a8241251c428b2415332a1bacb746b53352bc3348a0c7b6e14cf3ba7bb7bb9125cdcbc5deaffc25abc62317c0aa0f998e386609c6455ac3d5b22838998772dc4d9b50a2d6aeff6573b07b84ec6c00f5bde6d03374cc43f91651bef62960bcc98f93cda40d69c1e53681a19fd3637cf8830d7564d1d8efe53a2bf20634ff4bf5a07670fc337fc20da0509f2d90f5e2eb0194c44f0cffba5f01ae42adf8b5a7c06410a974646500d1380da28b99c9b3bfa5d1cdb0525636aecbf4fb736b41c59de5733de25cb44e228abe31f492d964d7618025873d8ba8056215df663b2fe4af9fbfdc3b29d0e185a11143dac90bff8cd08a1900619f75547a7404e01715047041479b9b77c24da2123d87ae188320fb74548626b5d23132a6668dac648fa0be5925736b967a053eda73f93565689fc7e2de8353e7c8fa2c5b31c1c99e38c9daa08b929638289fbee1f85502bacb9056a89ff7c2d8823bb4e0eb61f31f7aebf2bd63b4cdc43e2fcefe178470ee6afc7db2250251c1f3d04547ca15abd27d6c246e3276076a32db27693210d26cec15f0bbe4ba72a55eee5df9946384423591b5001b60e19bc8ccc3dda47d787fe8d4a674d8c778bc93ecab36c88edc286a6e8cbc2a517d745044d2364069933b0c71720260b76e267ccdcede44f326d0aed853554ff608ff557cb1ff82c94659037e6c961786202c3541b166cae6f3b66acd9f21f7d85035bca613404011e4ef06b868863c39d986a49756d9a5d326b04423e1efb6f0a30bdf8e7061f5c14ee24400ce91cd168ee41a50ed96b4d718d51c40ce4bd4dca192ae301285fb1369317c1756190351c8125c55b4881e2b989c6a731bd9e9c4130463a650e70b070daa652f1f447a96fc6e8bf5111bf2d1ff27aafb224b7eebe101be187b0b6ae1d556e217fa5dd43c3d4dc4f6b0da916aaa59dfc9628b0b879120a4c3610e74194ff0422a4e9bd04fd5aedec1e2159c9ba7d93cb1643a417dd4e27e78222dd767623fa462f29a328f225664357ffe29479d92860111e9735cebeee88a6d1f7e72841bb29ad9e81a9e0207b9b57d5f4230c1fb00c4e37c408bea852d0779be095580bd6a2a7270eea82ba66b6a72073bb37d26b5a39ddbc41e958ed5c721140a996500141b8461143d2d2fb3e5f085415bfc7dc7f4a08d6e09405ec6a0f1feda8ea123d5a9115964d53d400802ab868adc2b7e35ed589db59fc88b5ffe68f110cd431bbd65e76f5f0f7ae636964cb774b86b9c4a238844b8e52d7774cacf8415283668c771de00ced1d2a9fcea74adcd347f0d20bcb886ef6b7566ec83d7a830942576ea35710283ce5f145b59a44d6f6738cadc35e8b24f9e1313deadc0f99a0c8911d6b9648a3c933fc8b2c4c0ec428339dfabc9d1251039f955318c9fb20efbb38aa877bcf6a3e50149dc4683028203b4baad679af549fc3acad47d9322ddbaafa9d0a738bb43b8487d72d93d424de57dea2cf6e79dc26c1c7ceb3ea1b270cfee899727a6fd933245125ba4a66608306a14d86870d3571d3c83ab65e5734e88b500fc348bb7148f3576a07707bce5cd440cf074cb0932b40afae71b43eb986ecb31379e7494d78e256d22b5d70dc5377d873e9f549d60031b5a75a6f84279c39bb09d19b5565b47ca48c76160835c2dfd53a996bcb3dc6f6480da0e706fc13665fc2476d6bbd7b87dd1bba00cf6d4c8318fe9050f5bc797d3c3baac40b0557c119df9fc7a62484c0c9f09efc9b2cb9a34330df804e2751d95fde02ecf2bce18d91bf7a626a6614e86be4be166311db95492530b03c87d3505a60d3e54f71bd2f4f7e4fb026b441eaa188cb6932fbd8494eb5b35e17a39189bc7f6940614aaaf25224d1e91192ce5c280b16b3ccafa0e61758ba810195a7f212e9cc8c325d88d4c1daeb2508b725a25f63829c427a30f84b5c5dfb0cb43fe15637e1a361011668bae3663e5b9b15d5b76655a237e9f159580d5d47a38b36c1dfb3444cae1a72a3792a2c20069db8d32cf3f652b399e764163a43da7245f9ca690e8b9603a12fe50d3fdbaef20891ab06c838695fa4becb59bea7d148b5aa043ddcf23921dc417e4eef5d0756e6b417e09590764b568c0195cc18240334776c48069d874deda0102fca5ecf8d2b447c791e854dc9d5f4e25f9d8af2c1611d6b47341238a97c5422f3fc8c50d8797dc4961ffb18cc35f539cd12dccae5209583188c64db02d3b47966aa4bfbf1d0e78e04d8bb6814998e48fd1ec1e43a253263af40c511d4bc5ad980aec489eb4fe5bc9fe751fca46288c47f98449a89a87ac24f974cb4ba2e153b9555dfe9bf4848b7c873cbb5c83f68f50b7a51d00a726ced946b5070d944d8d9f2da87bd20d6bf97f79a0dbaad312113e10fa139658861710de3424d979c253763d972ff5bbb395124607ef754608560a4047c8c322d594159788c6712d69161dec3a5e12eb1a800d6592a6315754429e238d496dd572869cf3af514add780370b67676d89c7a11be8ce2c95cd00bd855ab92629fd54118c8a2a059c49dd4c54a4a6faf6a04ce8ea770134e1a5e60f6d21844d8"}, {0x78, 0x6, 0x8, "e14071f196cda72ef79f15f73a788fff7bc8707ba362a9a2343ba376c17b5be150627100867712c5a5f0dae486d673823b041a40eb15f0101cea0302d63dc917e6191d842cf587b4edb831c5b1b008fa0927763e158a3e79d40d1f52721b43d007"}], 0x21b8, 0x4}, 0x3ff}], 0x7, 0x4048090)

[  598.696674] 9pnet: Insufficient options for proto=fd
22:23:16 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:16 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:16 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  598.890285] 9pnet: Insufficient options for proto=fd
22:23:16 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

22:23:16 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:16 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:16 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:16 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:16 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:16 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)="c24b9e08b2ac0e4907f94c7c8946093c1d48fb38b9c8f890603eff87ac940540a42c827480300b7af2ab451043ff96f3c1b496c658377c42a95d88d8828cd441e68eb34863a455dc59db8be853b96715f41d9a373821a2a74543046ece5cab5366828329f0f2854b283553108a896034c8843ac5a4116b7793a66bde7645e5c7e8ba468b179d73f90c72f5caa259ceb2190eda766d64966013ec6eda7dca6c20905b7b567c02355e1658f8419e876bd935a428d67ca44d26aa610b487e345909b02377a7f833640188c98d7739b6efb1f9a3dabd45eaba8bfe60363650bde0e3d5495c874dee6dde299d8c68eb", 0xed, 0xfffffffffffffffd)
r2 = request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)='wlan0)\x00', 0x0)
keyctl$instantiate_iov(0x14, r1, &(0x7f0000000380)=[{&(0x7f0000000240)="8b52c7dd5bddd03c97b53bbaef73756d9387568b9d3b0caa290fa857b3366ae525b4d7a58315529c2ed0439b663ab83c7fc3364f344cbdc1f517fd4baa5ea4d4a8425977c081ff40939ee22c3e6e93c202c0d7b01c1e54319aeac09ccf547de63a6074828a0132554e3bcaf7fe44e9d84ecd4a67a996ba890dc5d99df31b29a458bd058a0d129a62bd26a7769a93da6f5546b276fe1dc5fdc02014687211568fb812b391234b564f6dcd13104429f2aa55882cf0782a6fbd7ab2d376ff823031bd6e44a5d5b8daf5cc06e9d2db88a0a8f76524146074c5c0", 0xd8}, {&(0x7f0000000340)="504c9ee1d1f8961298387241eaabcee92a4cbc58289a7ad23c24321bfedbfea7cb61438d777d972bc3afe9390bedefdaec4864b182bfc965374eb4cf5f0b", 0x3e}], 0x2, r2)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$KDSKBLED(r3, 0x4b65, 0xffffffff00000000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:16 executing program 2:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:16 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  599.043149] 9pnet: Insufficient options for proto=fd
22:23:16 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:16 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:16 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:16 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  599.072325] attempt to access beyond end of device
[  599.078318] loop0: rw=536870912, want=114, limit=112
[  599.093026] buffer_io_error: 22 callbacks suppressed
[  599.093032] Buffer I/O error on dev loop0, logical block 113, lost async page write
[  599.111058] attempt to access beyond end of device
[  599.116390] loop0: rw=536870912, want=115, limit=112
22:23:17 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000000c0)={0xb0})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

[  599.121601] Buffer I/O error on dev loop0, logical block 114, lost async page write
[  599.129538] attempt to access beyond end of device
[  599.134730] loop0: rw=536870912, want=116, limit=112
[  599.140525] Buffer I/O error on dev loop0, logical block 115, lost async page write
[  599.163224] attempt to access beyond end of device
[  599.168191] loop0: rw=536870912, want=117, limit=112
[  599.174409] Buffer I/O error on dev loop0, logical block 116, lost async page write
[  599.182376] attempt to access beyond end of device
[  599.187404] loop0: rw=536870912, want=130, limit=112
[  599.192569] Buffer I/O error on dev loop0, logical block 129, lost async page write
[  599.200364] attempt to access beyond end of device
[  599.205739] loop0: rw=536870912, want=131, limit=112
[  599.210873] Buffer I/O error on dev loop0, logical block 130, lost async page write
22:23:17 executing program 3:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

[  599.218844] attempt to access beyond end of device
[  599.223875] loop0: rw=536870912, want=132, limit=112
[  599.229103] Buffer I/O error on dev loop0, logical block 131, lost async page write
[  599.244841] attempt to access beyond end of device
[  599.260050] loop0: rw=536870912, want=133, limit=112
22:23:17 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

[  599.272233] Buffer I/O error on dev loop0, logical block 132, lost async page write
[  599.283696] attempt to access beyond end of device
[  599.292607] loop0: rw=536870912, want=2174, limit=112
[  599.309016] 9pnet: Insufficient options for proto=fd
22:23:17 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
dup2(r0, r1)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r2)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r2, &(0x7f0000000400)=""/240, 0xf0)

22:23:17 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:17 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:17 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:17 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
prctl$setmm(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x0, 0x2}, 0x3, 0x5})
ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x8, 0x0, 0x0, 0x80000001, 0x6, [{0xde, 0x7ff, 0x709b, 0x0, 0x0, 0x1200}, {0x1, 0x6, 0x5, 0x0, 0x0, 0x200}, {0x1, 0x2, 0x10001, 0x0, 0x0, 0x1482}, {0x5, 0x3f, 0x5, 0x0, 0x0, 0x128a}, {0x7, 0x80000001, 0xfffffffffffffffd}, {0xfffffffffffffffd, 0x5, 0x9, 0x0, 0x0, 0x1000}]})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0)

22:23:17 executing program 2:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:17 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

[  599.576283] 9pnet: Insufficient options for proto=fd
22:23:17 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:17 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:17 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
socketpair(0x11, 0x0, 0x7fffffff, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x6, 0x0, 0xfffffffffffffffa, 0x241d, 0x80, 0x15, 0x0, 0x9, 0x10000}}, 0x43)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000001c0)={0x6, 0x0, 0x6})
flock(r0, 0xd)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0xc}, 0x52b, 0x1, 0xff, 0x4, 0x100000000, 0x4, 0x7fff}, &(0x7f00000000c0)=0x20)
r3 = getpgid(0x0)
write$cgroup_pid(r2, &(0x7f0000000380)=r3, 0x12)
write$selinux_user(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f603a6661696c6c6f675f743a73302075736501a2676dc91127cd01b175ce18acfe7fcfb96d049fc44a1997298be8e16f6898ed2adc3fd753b1a8c3c5a9dc9b35a400000000000000072634cfe2c8a8dc048b2c3f136f21d1c63b3e3f36daa036ff527549204d1eb1d1bd608313d1bed545e6d9c1aae0a9ebed3e21c46ecd9f3dc3b457c6f39ef58a907adaad43208692bfee78e1c980a5ed98669fe7f62fddf6f45e9dfe6319dafb83865b7624bc2205309db144cd710509bd07cf229f70b47ae17de338e31f8e7b564ff55bcd5ffc71d172444b9d"], 0x26)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x101400, 0x0)

[  599.577816] 9pnet: Insufficient options for proto=fd
[  599.592199] attempt to access beyond end of device
[  599.592205] loop0: rw=536870912, want=130, limit=112
[  599.592212] Buffer I/O error on dev loop0, logical block 129, lost async page write
[  599.592224] attempt to access beyond end of device
[  599.592229] loop0: rw=536870912, want=131, limit=112
[  599.592233] Buffer I/O error on dev loop0, logical block 130, lost async page write
[  599.592243] attempt to access beyond end of device
[  599.592248] loop0: rw=536870912, want=132, limit=112
[  599.592257] attempt to access beyond end of device
[  599.592261] loop0: rw=536870912, want=133, limit=112
[  599.592271] attempt to access beyond end of device
[  599.592275] loop0: rw=536870912, want=142, limit=112
[  599.592286] attempt to access beyond end of device
[  599.592290] loop0: rw=536870912, want=143, limit=112
22:23:17 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(0xffffffffffffffff, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:17 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
prctl$setmm(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x0, 0x2}, 0x3, 0x5})
ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x8, 0x0, 0x0, 0x80000001, 0x6, [{0xde, 0x7ff, 0x709b, 0x0, 0x0, 0x1200}, {0x1, 0x6, 0x5, 0x0, 0x0, 0x200}, {0x1, 0x2, 0x10001, 0x0, 0x0, 0x1482}, {0x5, 0x3f, 0x5, 0x0, 0x0, 0x128a}, {0x7, 0x80000001, 0xfffffffffffffffd}, {0xfffffffffffffffd, 0x5, 0x9, 0x0, 0x0, 0x1000}]})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0)

22:23:17 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  599.592300] attempt to access beyond end of device
22:23:17 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

[  599.592305] loop0: rw=536870912, want=144, limit=112
[  599.592315] attempt to access beyond end of device
[  599.592319] loop0: rw=536870912, want=145, limit=112
[  599.593296] attempt to access beyond end of device
[  599.593301] loop0: rw=536870912, want=2178, limit=112
[  599.766445] 9pnet: Insufficient options for proto=fd
[  599.917716] 9pnet: Insufficient options for proto=fd
22:23:17 executing program 3:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

22:23:17 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
socket$inet6(0xa, 0x100000003, 0x80000000000006)
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:17 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(0xffffffffffffffff, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:17 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
prctl$setmm(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x0, 0x2}, 0x3, 0x5})
ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x8, 0x0, 0x0, 0x80000001, 0x6, [{0xde, 0x7ff, 0x709b, 0x0, 0x0, 0x1200}, {0x1, 0x6, 0x5, 0x0, 0x0, 0x200}, {0x1, 0x2, 0x10001, 0x0, 0x0, 0x1482}, {0x5, 0x3f, 0x5, 0x0, 0x0, 0x128a}, {0x7, 0x80000001, 0xfffffffffffffffd}, {0xfffffffffffffffd, 0x5, 0x9, 0x0, 0x0, 0x1000}]})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0)

22:23:17 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:17 executing program 5:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x3, 0xfffff7fffffffffa, 0x3, 0x10000000}})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x105101, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0)
ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000140)=""/84)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:17 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:17 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:17 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
prctl$setmm(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x0, 0x2}, 0x3, 0x5})
ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x8, 0x0, 0x0, 0x80000001, 0x6, [{0xde, 0x7ff, 0x709b, 0x0, 0x0, 0x1200}, {0x1, 0x6, 0x5, 0x0, 0x0, 0x200}, {0x1, 0x2, 0x10001, 0x0, 0x0, 0x1482}, {0x5, 0x3f, 0x5, 0x0, 0x0, 0x128a}, {0x7, 0x80000001, 0xfffffffffffffffd}, {0xfffffffffffffffd, 0x5, 0x9, 0x0, 0x0, 0x1000}]})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0)

[  600.042782] attempt to access beyond end of device
[  600.056318] loop3: rw=536870912, want=130, limit=112
[  600.063983] 9pnet: Insufficient options for proto=fd
[  600.067805] 9pnet: Insufficient options for proto=fd
[  600.082552] attempt to access beyond end of device
22:23:17 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(0xffffffffffffffff, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:17 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:17 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x3, 0x1, 0x3, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, &(0x7f0000000140)="96594d54ea6ab601fd6df5968fb6312d668c8cb0cce2f79a652787c9ea6aaa32b4e45c9c6ecbcccf62077735e34e0614b8a093c4d57e4a3480ec29441fcae3cffcd85446ebeaf6", 0x47, 0x4000, &(0x7f00000000c0)={0x2, 0x4e24}, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:17 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  600.097871] loop3: rw=536870912, want=131, limit=112
[  600.104125] attempt to access beyond end of device
[  600.109096] loop3: rw=536870912, want=132, limit=112
[  600.118753] attempt to access beyond end of device
[  600.124344] loop3: rw=536870912, want=133, limit=112
[  600.129825] attempt to access beyond end of device
[  600.134908] loop3: rw=536870912, want=142, limit=112
[  600.140077] attempt to access beyond end of device
22:23:18 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:18 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
socket$inet6(0xa, 0x100000003, 0x80000000000006)
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:18 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
prctl$setmm(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x0, 0x2}, 0x3, 0x5})
ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x8, 0x0, 0x0, 0x80000001, 0x6, [{0xde, 0x7ff, 0x709b, 0x0, 0x0, 0x1200}, {0x1, 0x6, 0x5, 0x0, 0x0, 0x200}, {0x1, 0x2, 0x10001, 0x0, 0x0, 0x1482}, {0x5, 0x3f, 0x5, 0x0, 0x0, 0x128a}, {0x7, 0x80000001, 0xfffffffffffffffd}, {0xfffffffffffffffd, 0x5, 0x9, 0x0, 0x0, 0x1000}]})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

[  600.145104] loop3: rw=536870912, want=143, limit=112
[  600.152441] attempt to access beyond end of device
[  600.158505] loop3: rw=536870912, want=144, limit=112
[  600.167723] attempt to access beyond end of device
[  600.172730] loop3: rw=536870912, want=145, limit=112
[  600.178840] attempt to access beyond end of device
[  600.184118] loop3: rw=536870912, want=2178, limit=112
[  600.283033] 9pnet: Insufficient options for proto=fd
[  600.292532] 9pnet: Insufficient options for proto=fd
22:23:18 executing program 3:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(0xffffffffffffffff, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:18 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
inotify_init()
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:18 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:18 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:18 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:18 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:18 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
prctl$setmm(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x0, 0x2}, 0x3, 0x5})
ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x8, 0x0, 0x0, 0x80000001, 0x6, [{0xde, 0x7ff, 0x709b, 0x0, 0x0, 0x1200}, {0x1, 0x6, 0x5, 0x0, 0x0, 0x200}, {0x1, 0x2, 0x10001, 0x0, 0x0, 0x1482}, {0x5, 0x3f, 0x5, 0x0, 0x0, 0x128a}, {0x7, 0x80000001, 0xfffffffffffffffd}, {0xfffffffffffffffd, 0x5, 0x9, 0x0, 0x0, 0x1000}]})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})

22:23:18 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
socket$inet6(0xa, 0x100000003, 0x80000000000006)
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:18 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:18 executing program 5:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r0=>0x0)
r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb, 0x40000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000200)=""/196)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000140))
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x400, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000540)={0x3, 0xb5, 0x5, 'queue1\x00', 0x3ff})
socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
socketpair(0x11, 0x6, 0x1ff, &(0x7f0000000340)={<r5=>0xffffffffffffffff})
ioctl$PIO_FONT(r5, 0x4b61, &(0x7f0000000380)="325ac0d95ac2c3c1c714ae385fd8db33b31f5ee88602d297698a41c19d2f9213ba2064a43c6608359085e172286113984e02ad74c705bc72c367eb6987c1356da0280c2270e5ce")
ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f00000000c0))
r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x20401, 0x0)
ioctl$BLKDISCARD(r6, 0x1277, &(0x7f0000000300)=0x3)
ioctl$TIOCNXCL(r6, 0x540d)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x400f01, 0x0)

22:23:18 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:18 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

[  600.555450] 9pnet: Insufficient options for proto=fd
[  600.562170] attempt to access beyond end of device
[  600.562341] attempt to access beyond end of device
[  600.562347] loop3: rw=536870912, want=114, limit=112
[  600.562369] attempt to access beyond end of device
[  600.562373] loop3: rw=536870912, want=115, limit=112
22:23:18 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

[  600.562382] attempt to access beyond end of device
[  600.562387] loop3: rw=536870912, want=116, limit=112
[  600.562396] attempt to access beyond end of device
[  600.562400] loop3: rw=536870912, want=117, limit=112
[  600.562409] attempt to access beyond end of device
[  600.562413] loop3: rw=536870912, want=130, limit=112
[  600.562422] attempt to access beyond end of device
[  600.562426] loop3: rw=536870912, want=131, limit=112
[  600.562436] attempt to access beyond end of device
22:23:18 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
prctl$setmm(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x0, 0x2}, 0x3, 0x5})
ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x8, 0x0, 0x0, 0x80000001, 0x6, [{0xde, 0x7ff, 0x709b, 0x0, 0x0, 0x1200}, {0x1, 0x6, 0x5, 0x0, 0x0, 0x200}, {0x1, 0x2, 0x10001, 0x0, 0x0, 0x1482}, {0x5, 0x3f, 0x5, 0x0, 0x0, 0x128a}, {0x7, 0x80000001, 0xfffffffffffffffd}, {0xfffffffffffffffd, 0x5, 0x9, 0x0, 0x0, 0x1000}]})

22:23:18 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
fchmod(r0, 0x10)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0x20, 0x6, '9P2000'}, 0x13)

[  600.562440] loop3: rw=536870912, want=132, limit=112
[  600.562449] attempt to access beyond end of device
[  600.562453] loop3: rw=536870912, want=133, limit=112
[  600.563406] attempt to access beyond end of device
[  600.563411] loop3: rw=536870912, want=2174, limit=112
[  600.681310] loop0: rw=536870912, want=114, limit=112
[  600.686878] attempt to access beyond end of device
[  600.692080] loop0: rw=536870912, want=115, limit=112
[  600.697247] attempt to access beyond end of device
[  600.702205] loop0: rw=536870912, want=116, limit=112
[  600.707359] attempt to access beyond end of device
[  600.712611] loop0: rw=536870912, want=117, limit=112
[  600.717790] attempt to access beyond end of device
[  600.722743] loop0: rw=536870912, want=130, limit=112
[  600.727836] attempt to access beyond end of device
[  600.732816] loop0: rw=536870912, want=131, limit=112
[  600.737933] attempt to access beyond end of device
[  600.742877] loop0: rw=536870912, want=132, limit=112
[  600.747982] attempt to access beyond end of device
[  600.753302] loop0: rw=536870912, want=133, limit=112
[  600.769351] attempt to access beyond end of device
[  600.799717] 9pnet: Insufficient options for proto=fd
22:23:18 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  600.831505] loop0: rw=536870912, want=2174, limit=112
22:23:18 executing program 3:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:18 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
prctl$setmm(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x0, 0x2}, 0x3, 0x5})

22:23:18 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:18 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:18 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:18 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:18 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x0, 0x2}, 0x3, 0x5})

[  600.947131] 9pnet: Insufficient options for proto=fd
22:23:18 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
socket$inet6(0xa, 0x100000003, 0x80000000000006)
socket$packet(0x11, 0x808000000002, 0x300)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r0, &(0x7f0000000400)=""/240, 0xf0)

22:23:18 executing program 3:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:18 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:18 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:18 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:18 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(0xffffffffffffffff, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:18 executing program 5:
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'nat\x00', 0x2, [{}, {}]}, 0x48)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x2000000000000000, 0x0, 0x9, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
r2 = request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000003c0)='/dev/sequencer2\x00', 0xfffffffffffffffa)
add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="0c4918f667141bd3a761776b8e5de780143830403a486c3e78d611ff05641c0148780f63f2ec337801dbf0d4f393e9521af8dd4b39868bb571e15d75e144854367bca3f7bd75d95228b6d4e8e1ac8a23725c9c53486833532e4e2f950c11db70bf8c5d34e907e3c64c8b91ab698b5d2417f83d7991b88ec52368dc3321646abdb370942b8ae0488fba128bc71bd13e0b927e6dd379161c1dc3218c60c7baf27569bc9b036d0b0d670ea9c7e0a96ddcec632bb8779f672c20e4c934b2662a314fcea25150ca68b3be3c9d90132969c1c552e398d73e", 0xd5, r2)

22:23:18 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x0, 0x2}, 0x3, 0x5})

22:23:18 executing program 7:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:19 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x400000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:19 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:19 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:19 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

22:23:19 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x0, 0x2}, 0x3, 0x5})

22:23:19 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
socket$inet6(0xa, 0x100000003, 0x80000000000006)
socket$packet(0x11, 0x808000000002, 0x300)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r0, &(0x7f0000000400)=""/240, 0xf0)

22:23:19 executing program 5:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000001c0)={{0xffffffffffffffff, 0x2, 0x4003, 0xffeffffffffffffd, 0x99}})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x4, 0x1, 0x3, 0x7, 0x0, 0x6, 0x2000, 0x4d947ba9c2efed25, 0x6625, 0x7fffffff, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x7, 0x9, 0x9, 0x6, 0x9, 0x8, 0x6, 0x0, 0x0, 0x39e3, 0x7, 0xeb36, 0xfff, 0x8, 0x6, 0x8, 0x3f, 0x5, 0x5, 0x800, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x200, 0x7, 0x5, 0x6, 0x6c6, 0x7, 0x9}, 0x0, 0x1, r0, 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:19 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x0, 0x2}, 0x3, 0x5})

22:23:19 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:19 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:19 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x0)

22:23:19 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f76")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:19 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
socket$inet6(0xa, 0x100000003, 0x80000000000006)
socket$packet(0x11, 0x808000000002, 0x300)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r0, &(0x7f0000000400)=""/240, 0xf0)

22:23:19 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x0, 0x2}, 0x3, 0x5})

22:23:19 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:19 executing program 3:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:19 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe17a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x80)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:19 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:19 executing program 7:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:19 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x0)

22:23:19 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x0, 0x2}, 0x3, 0x5})

22:23:19 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:19 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x0, 0x2}, 0x3, 0x5})

22:23:19 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:19 executing program 5:
getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, <r0=>0x0}, &(0x7f0000000180)=0xc)
pipe2(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00')
fanotify_mark(r1, 0x93, 0x20, r1, &(0x7f00000000c0)='./file0\x00')
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r3, 0x721, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x8f}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
getgroups(0x2, &(0x7f00000001c0)=[r0, r0])
getgid()
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0)
syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x2800)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDENABIO(r2, 0x4b36)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000380)={0x80, 0x3, 0x5, 0xd4eb, 0x5})

22:23:19 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x0, 0x2}, 0x3, 0x5})

22:23:19 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x0)

22:23:19 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:19 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
socket$inet6(0xa, 0x100000003, 0x80000000000006)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r0, &(0x7f0000000400)=""/240, 0xf0)

22:23:19 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:19 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x0, 0x2}, 0x3, 0x5})

22:23:19 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:19 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x0)

22:23:19 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e20, 0x9, @empty, 0x3}, {0xa, 0x4e24, 0x1, @ipv4, 0x5}, 0x4, [0x10001, 0x2, 0xad, 0x4, 0x5, 0x0, 0x8, 0x6]}, 0x5c)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000001c0)={0x42359adb}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x6, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:19 executing program 7:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x0)

22:23:19 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x5})

22:23:19 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="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")

22:23:19 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:19 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:19 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006)
r1 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r3)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r3, &(0x7f0000000400)=""/240, 0xf0)

22:23:19 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x5})

22:23:19 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="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")

22:23:19 executing program 7:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_0\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:19 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{}, 0x3, 0x5})

22:23:19 executing program 5:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
setuid(r1)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x900, 0x0)
ioctl$TIOCSCTTY(r3, 0x540e, 0xe36)
r4 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x2000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0)
r5 = signalfd4(r0, &(0x7f00000000c0)={0x9c5d}, 0x8, 0x80800)
write$binfmt_elf64(r5, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x927, 0x7, 0xe5, 0x7, 0x20c, 0x3, 0x3f, 0xe57, 0x1cb, 0x40, 0x2f, 0x10000, 0xffffffff, 0x38, 0x2, 0x10000, 0x5, 0x1}, [{0x1, 0x8, 0xfffffffffffffff9, 0xfffe00000, 0x1, 0x7fff, 0x2879, 0x80000000}], "cd7ffbeb70c0d3fcf3c8bb4668cb84148f12f941bc755edd715933c6eed0c0eba732045356194897f10a28d9d9226b2ecb7185cc32a68b2f69c304c31de0c52a60"}, 0xb9)
write$FUSE_ENTRY(r3, &(0x7f0000000280)={0x90, 0x0, 0x3, {0x5, 0x3, 0x85d8, 0x5, 0x1, 0xcdb, {0x4, 0x2, 0x0, 0x0, 0x9, 0xffffffff, 0x3, 0x3, 0x7, 0x7fffffff, 0x5, r1, r2, 0x401, 0x63fc39b1}}}, 0x90)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:20 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="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")

22:23:20 executing program 0:
syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743e063d63703835322c00"])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:20 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:20 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:20 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{}, 0x3, 0x5})

22:23:20 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

[  602.222491] attempt to access beyond end of device
[  602.229217] loop0: rw=536870912, want=130, limit=112
[  602.250756] attempt to access beyond end of device
[  602.260740] loop0: rw=536870912, want=131, limit=112
[  602.267407] attempt to access beyond end of device
[  602.273963] loop0: rw=536870912, want=132, limit=112
[  602.279723] attempt to access beyond end of device
[  602.304620] loop0: rw=536870912, want=133, limit=112
22:23:20 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

22:23:20 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{}, 0x3, 0x5})

22:23:20 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @dev}, @in=@multicast1}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000380)=<r2=>0x0)
ioprio_set$pid(0x3, r2, 0x3)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff)
ioctl$KDDISABIO(r3, 0x4b37)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f627573206367726f7570757365725b5b70726f63656d3076626f786e657431657468302d40776c616e31200000616e3000207663616e300020a020207663616e30000ad96e7dd51040c7ddce6b88b25e672b507e8161056db69c6f1cce1c5b4a0d9482b4b533ef6a8a5da9e5959f914108e1019ad89ee9a52833b744d200eb384d9a35548e5c1f5af2ef96f1a7180782d398b9e9c1c1d60100000083ecbc10ba23718ca51f6309b482b10000000000000000000000000000"], 0xbd)
fallocate(r3, 0x1, 0x0, 0x10000101)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000140)={@empty, 0x71, r4})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000040)={0x6, 0xffff, 0x7}, 0xc)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00001edff0)={0x2, 0x4e23, @multicast1}, 0x10)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/load\x00', 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f00000002c0)={'dummy0\x00', 0xed4})
sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="e8156663"], 0x1}}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:20 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  602.360638] attempt to access beyond end of device
[  602.387189] 9pnet: Insufficient options for proto=fd
[  602.405449] loop0: rw=536870912, want=142, limit=112
[  602.410734] attempt to access beyond end of device
[  602.423288] loop0: rw=536870912, want=143, limit=112
[  602.435842] attempt to access beyond end of device
[  602.440923] loop0: rw=536870912, want=144, limit=112
[  602.447082] attempt to access beyond end of device
[  602.494223] loop0: rw=536870912, want=145, limit=112
22:23:20 executing program 4:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:20 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:20 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

[  602.526086] attempt to access beyond end of device
[  602.540815] loop0: rw=536870912, want=2178, limit=112
[  602.593879] 9pnet: Insufficient options for proto=fd
[  602.602751] attempt to access beyond end of device
[  602.607713] loop4: rw=536870912, want=114, limit=112
[  602.623332] attempt to access beyond end of device
[  602.638019] loop4: rw=536870912, want=115, limit=112
[  602.651584] attempt to access beyond end of device
[  602.656580] loop4: rw=536870912, want=116, limit=112
[  602.666726] attempt to access beyond end of device
[  602.671972] loop4: rw=536870912, want=117, limit=112
[  602.677137] attempt to access beyond end of device
[  602.682912] loop4: rw=536870912, want=130, limit=112
[  602.688076] attempt to access beyond end of device
[  602.693159] loop4: rw=536870912, want=131, limit=112
[  602.698312] attempt to access beyond end of device
[  602.703283] loop4: rw=536870912, want=132, limit=112
[  602.708389] attempt to access beyond end of device
[  602.716728] loop4: rw=536870912, want=133, limit=112
[  602.722724] attempt to access beyond end of device
[  602.727706] loop4: rw=536870912, want=2174, limit=112
22:23:20 executing program 7:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x9000000141042, 0x80)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:20 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x5})

22:23:20 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:20 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:20 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

22:23:20 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:20 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000200)={{0x3, 0x0, 0x1, 0x1, 0x80}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000140)="fc6fd1ad72931313a569ee86261e23051a188ba1b7f1266af0cce7689b6bc735cf5b53df6cb65680e390ba34477c6a89f9552b8bf5dc9d0654a62f31b3c74d8edf0aab596e9a2a8c179cd194326a1b1452e3e7b5a322abc3488735d4c03fa3cf01ee88cffa6f2f709023f64615a8da1c6b764be0ced8952e4351bf587ff1132bb88cf283f3cb99c60c5f8c9a", 0x8c, 0x40, &(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x6}, 0x10)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:20 executing program 4:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:20 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x5})

22:23:20 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:20 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)

[  602.912942] 9pnet: Insufficient options for proto=fd
22:23:20 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:20 executing program 4:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:20 executing program 5:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x40, 0x1, 0xffffffff, 0x7fffffff, 0x0, 0x6, 0x40000, 0x7, 0x0, 0xfffffffffffffff7, 0x9, 0x100000000, 0x522b, 0x2, 0x3, 0x0, 0xa5, 0x2, 0xdd2, 0xb7a4, 0x7e27ddbd, 0x10001, 0x2, 0x3ff, 0x80000000, 0x3, 0x29c8, 0x8, 0x20, 0x9, 0x15c49236, 0x1, 0x0, 0x20, 0x8, 0x7, 0x0, 0x5, 0x4, @perf_config_ext={0xffff, 0x8}, 0x60, 0x8, 0x2, 0x1, 0x17, 0x2, 0x9}, r1, 0x5, 0xffffffffffffffff, 0xb)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0x1, 0x8b2d, 0x9, 0x800, 0x0, 0x80000000, 0x82105, 0x4, 0x3f, 0x0, 0x20, 0x88c, 0x4, 0x80, 0x6f695c36, 0x6, 0x100000000, 0x2, 0x1, 0x3, 0x80000001, 0x7, 0x6, 0x3, 0x1, 0x57, 0x7, 0x401, 0x4, 0x8, 0x80000001, 0x8, 0x7, 0x0, 0x5, 0x1, 0x0, 0x7fffffff, 0x5, @perf_bp={&(0x7f0000000200), 0xc}, 0x800, 0xffff, 0xdee5042, 0x2, 0xe3cd, 0x8, 0x3fa5}, r1, 0x7, r0, 0x1)
getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000340)={@mcast1, <r4=>0x0}, &(0x7f0000000380)=0x14)
setsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@mcast2, r4}, 0x14)
socketpair(0x11, 0x4, 0x2, &(0x7f0000000440))
r5 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
fstat(r2, &(0x7f00000002c0))
ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:20 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x5})

22:23:20 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

[  603.006184] 9pnet: Insufficient options for proto=fd
[  603.062090] attempt to access beyond end of device
[  603.067127] loop0: rw=536870912, want=114, limit=112
[  603.084367] attempt to access beyond end of device
[  603.099566] loop0: rw=536870912, want=115, limit=112
[  603.110442] attempt to access beyond end of device
[  603.116043] loop0: rw=536870912, want=116, limit=112
[  603.122425] attempt to access beyond end of device
[  603.127401] loop0: rw=536870912, want=117, limit=112
[  603.143978] attempt to access beyond end of device
[  603.148930] loop0: rw=536870912, want=130, limit=112
[  603.161924] attempt to access beyond end of device
[  603.166965] loop0: rw=536870912, want=131, limit=112
[  603.175576] attempt to access beyond end of device
[  603.180525] loop0: rw=536870912, want=132, limit=112
[  603.197123] attempt to access beyond end of device
[  603.202357] loop0: rw=536870912, want=133, limit=112
[  603.209416] attempt to access beyond end of device
[  603.214526] loop0: rw=536870912, want=2174, limit=112
[  603.293168] FAT-fs (loop0): bogus number of reserved sectors
[  603.299225] FAT-fs (loop0): Can't find a valid FAT filesystem
22:23:21 executing program 7:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000200)="e3fadb12d063f95760cf4dc5a80f698c7e288368a7f3ceb8343845614852decd82f068735ac458be4568687dfad59b6e2fa6a211c253aef69e10c8b06b6d7646489eab053897f34a47111b434e09c71dcd1971d6c0e068080f9dc90de9f9058a3ca30345815b90eefc062a49e983d61dc001f453303bc4e295f2c86a7460785bc13203570e3b328f7b279d9af488448f44824683c5c7fb310b488ea537fe2ea7d6a72631acee64e4035b81a57e8cbeb0507c89b3c114bf7f226a3c63764f853d4352995b77db49b51b83c421925605", 0xcf, 0x0)
r0 = socket$inet6(0xa, 0x3fffffffffff, 0x1)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:21 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:21 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3})

22:23:21 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)

22:23:21 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_0\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:21 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:21 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
r1 = open(&(0x7f0000000000)='./file1\x00', 0x1, 0x4)
bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file1\x00'}, 0x6e)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x302, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x10)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r3, &(0x7f00000000c0), 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000001, 0x4)
socket$key(0xf, 0x3, 0x2)
recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)=""/84, 0x54}], 0x1}, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
write$P9_RFLUSH(r4, &(0x7f0000000000)={0x7}, 0x7)
r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r5)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendmmsg(r3, &(0x7f0000000000), 0x80000000000030c, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
write$selinux_create(r6, &(0x7f0000000140)=@objname={'system_u:object_r:initrc_exec_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x10001, 0x20, './file0\x00'}, 0x65)

22:23:21 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:21 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:21 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)

22:23:21 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:21 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3})

[  603.751034] FAT-fs (loop0): bogus number of reserved sectors
[  603.763666] 9pnet: Insufficient options for proto=fd
[  603.778857] FAT-fs (loop0): Can't find a valid FAT filesystem
22:23:21 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

22:23:21 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:21 executing program 7:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000200))
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x618000, 0x0)

22:23:21 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

22:23:21 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340))
r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x3f, 0x0)

22:23:21 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3})

22:23:21 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:21 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_0\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:21 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

[  603.913342] 9pnet: Insufficient options for proto=fd
22:23:21 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

22:23:21 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @dev}, @in=@multicast1}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000380)=<r2=>0x0)
ioprio_set$pid(0x3, r2, 0x3)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff)
ioctl$KDDISABIO(r3, 0x4b37)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f627573206367726f7570757365725b5b70726f63656d3076626f786e657431657468302d40776c616e31200000616e3000207663616e300020a020207663616e30000ad96e7dd51040c7ddce6b88b25e672b507e8161056db69c6f1cce1c5b4a0d9482b4b533ef6a8a5da9e5959f914108e1019ad89ee9a52833b744d200eb384d9a35548e5c1f5af2ef96f1a7180782d398b9e9c1c1d60100000083ecbc10ba23718ca51f6309b482b10000000000000000000000000000"], 0xbd)
fallocate(r3, 0x1, 0x0, 0x10000101)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000140)={@empty, 0x71, r4})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000040)={0x6, 0xffff, 0x7}, 0xc)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00001edff0)={0x2, 0x4e23, @multicast1}, 0x10)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/load\x00', 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f00000002c0)={'dummy0\x00', 0xed4})
sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="e8156663"], 0x1}}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

[  603.953300] FAT-fs (loop0): bogus number of reserved sectors
[  603.959517] FAT-fs (loop0): Can't find a valid FAT filesystem
22:23:21 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:21 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

22:23:21 executing program 4:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_0\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:21 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/221, 0xdd}], 0x1)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f00000005c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:21 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  604.074729] BTRFS error (device loop5): superblock checksum mismatch
22:23:22 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

[  604.132283] BTRFS error (device loop5): open_ctree failed
22:23:22 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

[  604.232158] FAT-fs (loop0): bogus number of reserved sectors
[  604.238002] FAT-fs (loop0): Can't find a valid FAT filesystem
[  604.289934] BTRFS error (device loop5): superblock checksum mismatch
[  604.411830] BTRFS error (device loop5): open_ctree failed
22:23:22 executing program 7:
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x7)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)='syz_tun\x00', 0xfffffffffffffffb)
keyctl$get_security(0x11, r2, &(0x7f0000000240)=""/164, 0xa4)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:22 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:22 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8002, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10)
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x132)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x5})
tee(r1, r1, 0x0, 0x3)

22:23:22 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:22 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

22:23:22 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00./file0'], 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x10200, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f00000004c0)={0x0, <r4=>0x0})
wait4(r4, &(0x7f0000000500), 0xa0000003, &(0x7f0000000540))
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000380))

22:23:22 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101000, 0x0)
ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000140)=""/168)
accept$inet(r1, &(0x7f0000000080), &(0x7f0000000200)=0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)

22:23:22 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:22 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

22:23:22 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x5})

22:23:22 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x20000)
getsockopt$inet_buf(r3, 0x0, 0x3b, &(0x7f0000000940)=""/4096, &(0x7f0000000380)=0x1000)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:22 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

[  604.742210] FAT-fs (loop0): bogus number of reserved sectors
[  604.751118] FAT-fs (loop0): Can't find a valid FAT filesystem
[  604.896809] 9pnet: Insufficient options for proto=fd
22:23:22 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2cd8"])
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:22 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000140)=0x30)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:22 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:22 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

[  605.073097] FAT-fs (loop0): bogus number of reserved sectors
[  605.078926] FAT-fs (loop0): Can't find a valid FAT filesystem
22:23:23 executing program 7:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x800000000141042, 0x40)
ftruncate(r2, 0x2007fff)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000100)={'teql0\x00', 0x5})
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:23 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:23 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x5})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x6502, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0)

22:23:23 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000380)={0x1c, 0x640e8e69, 0xffffffff00000001, 0x6, 0x3, 0x3f, 0x1000, 0x6, 0x2, 0x5})
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
write$P9_RREADDIR(r3, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r3, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r3, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r3, &(0x7f0000000080)={0x14}, 0x14)
write$P9_RWALK(r3, &(0x7f00000004c0)={0x4a, 0x6f, 0x1, {0x5, [{0x2, 0x4, 0x4}, {0x60, 0x4, 0x5}, {0x40, 0x3, 0x2}, {0x1, 0x4, 0x7}, {0xa2, 0x3}]}}, 0x4a)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:23 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

22:23:23 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:23 executing program 5:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x101100, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000180)={'icmp\x00'}, &(0x7f00000001c0)=0x1e)
r2 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400, 0x0)
ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000000c0))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ftruncate(r0, 0xfffffffffffffff7)

22:23:23 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
r1 = fcntl$dupfd(r0, 0x406, r0)
r2 = openat(r1, &(0x7f0000000380)='./file0\x00', 0x400000, 0x180)
pipe2$9p(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r4, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="9a00"])
write$P9_RREADDIR(r4, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r4, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r4, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r4, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)
pwritev(r4, &(0x7f0000000700)=[{&(0x7f00000004c0)="c945534873b3a9511a03a184a5b6c353efa161579a1eb38f38b1318d579ebcad710d51daecdbd36dad1fe0450f0986bc8bebff9484d99e3ab6f2", 0x3a}, {&(0x7f0000000500)="f39d1b8a50f545e1b9167771e43cc945abe704ac6c288c58e54cc9f5dafb83adb7236ddb893b53515cd7f27779245215f70ddbc4578cd6bd8cb59ce141d6e62fd3a4a9338cd1f3885b1cbef4f93867b99f0a86ae233ba60611de9f6c1de622f3a14963af17b134c39851011678160085498497c761a2add31c970f49c487f05b8d0a9eab47bae2b796f5e5c2547fdbedc9a4625c3a2e56e1", 0x98}, {&(0x7f00000005c0)="af09933ab548c6e65b04f2949ec5298d2a5754fd7bf9dd097a1f03af3836d533097ae056b7973410710641b93be92b7639f03d42ad5ea5fac92dd41f59f3", 0x3e}, {&(0x7f0000000600)="ac9725e8d177f8e43dc5cb86c47140b03a3a840cbbdf1cffcae9df6ec17cd8ec531516d59c7f11ad724b90ccfc", 0x2d}, {&(0x7f0000000640)="3507ebca94b604da3015205e1aa40f15680ec4f603b40abd7249c1e51cb9f5e8d245aa4b8cff9a980f867a6323c1b430e2045a0ae6ee1a7ac7c131e2a7fa42594e72803498f758580bc964d998a9e3fc06eafac6463e7822ad45b7e942ecc154e3db98f3053d381fe160d69b6808255f5f9b4bc212046d16b1022ca8119750750a0d7dbb49392b6452f8600e6cbb1d5faef59b55e979ba112e829d06a3e34769a7bd52eefca8fa41a50e06320a5a2f167a68", 0xb2}], 0x5, 0x0)
ioctl$TCSBRK(r2, 0x5409, 0x5)

22:23:23 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:23 executing program 2:
r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rt_cache\x00')
ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100)=""/21)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8001, 0x0, 0xfffffffffffffff9, 0x4, 0x9})
r2 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x5})
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000001c0))

22:23:23 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

[  605.507270] 9pnet: Insufficient options for proto=fd
[  605.517885] 9pnet: Insufficient options for proto=fd
[  605.531459] FAT-fs (loop0): bogus number of reserved sectors
[  605.538808] FAT-fs (loop0): Can't find a valid FAT filesystem
22:23:23 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RATTACH(r2, &(0x7f0000000140)={0x14, 0x69, 0x1, {0xc0, 0x4}}, 0x14)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0x1be, 0x19, 0x1, {0x0, {0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x20000000000}}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:23 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000004c0)=""/237, &(0x7f0000000140)=0xed)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:23 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x8001, 0x4, 0x1, 0x5, 0x40d300af, 0x7f, 0x100000001, 0x9, 0x3, 0x6, 0xff, 0x7fffffff})

[  605.563146] 9pnet: Insufficient options for proto=fd
22:23:23 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000001c0))
write$selinux_load(r1, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "d1268b221ecdcb896b24446b9e937eb4489c061d7be9922dc9822b6d6049b11f17f3ac22b58578ae82e7383b71348d1ad71226b191ea5ddfa1d5420cb9182e968c21"}, 0x52)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x5})

22:23:23 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

[  605.638314] 9pnet: Insufficient options for proto=fd
22:23:24 executing program 7:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x40000, 0x0)
write$P9_RCREATE(r0, &(0x7f0000000140)={0x18, 0x73, 0x1, {{0x40, 0x0, 0x3}, 0x5}}, 0x18)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = getegid()
fchown(r1, r2, r3)
r4 = dup(r1)
setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r5, 0x2007fff)
sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:24 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:24 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000bc87aac79f093c1c98d567aa43fb07f353bb0d3c9b9a56eb3361197cfb6ade66b26318c3beb928c898875ac081c6", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00'])
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x40, 0x0)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
fcntl$getown(r0, 0x9)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="2c844d1de27d5b7d19573954bcf3d4"])
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000140)=""/31)
unshare(0x0)

22:23:24 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:24 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
sysfs$1(0x1, &(0x7f0000000000)='!:\x00')
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x5})

22:23:24 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x0, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

22:23:24 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
exit(0x800)
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
accept4$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000380)=0x14, 0x800)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000004c0)={@local, r3}, 0x14)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x101040, 0x0)
inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x41)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:24 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x345080, 0x0)
ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x42c)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x5})

22:23:24 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

[  606.327292] 9pnet_virtio: no channels available for device (null)
[  606.339168] 9pnet: Insufficient options for proto=fd
[  606.356744] 9pnet_virtio: no channels available for device (null)
[  606.366001] FAT-fs (loop0): bogus number of reserved sectors
22:23:24 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x40000c00)

22:23:24 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:24 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x90000, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@mcast1}}, {{}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8)
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xfff0000000000001}})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @dev}, &(0x7f0000000280)=0xc)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)

[  606.376857] FAT-fs (loop0): Can't find a valid FAT filesystem
22:23:24 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x4)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x5})

22:23:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:24 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

[  606.532964] 9pnet: Insufficient options for proto=fd
[  606.552104] FAT-fs (loop0): bogus number of reserved sectors
[  606.560394] FAT-fs (loop0): Can't find a valid FAT filesystem
22:23:24 executing program 7:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000140)="6548453188e7ebfc8ff192a51954760968c07965903d192d712abac164b707", 0x1f, 0x2000000c, &(0x7f00008d4fe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000200)=""/110)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100))

22:23:24 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3})
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/validatetrans\x00', 0x1, 0x0)

22:23:24 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)

22:23:24 executing program 5:
r0 = getpgrp(0x0)
r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x8}, 0x1000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
connect$unix(r2, &(0x7f0000001540)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
r3 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80800)
setsockopt$inet6_int(r4, 0x29, 0x17, &(0x7f0000000340)=0x4, 0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000400)={0x10002000})
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x100)
fcntl$addseals(r4, 0x409, 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000540)="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", 0x1000, 0x4, &(0x7f0000000380)={0xa, 0x4e22, 0x10000, @dev={0xfe, 0x80, [], 0x14}, 0x7}, 0x1c)
r6 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000100)={'bridge0\x00', {0x2, 0x4e21, @remote}})
add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)="b347a329e55782c6cd317b2d6ef9824ef8b4f7257a61926dfc31a518512d302847a819eb035ae508fd59dfe012d037f14c8fb4738fe35df5987acf8e824a91ce468ed643c867b31bb53e85ae1ef1bf546e4d675cb6a1be28ab8c3a3ee4f6611695a01149e2587a921544eb063a844c19f782e8333d1830938cc3d9cad2b161b621f207ab6eab6b1a77bcd3f29e54dad0fd66afeabb501ebbea013aa037865111d8d370c23e6c77ea15bcaabb983b3b32613101ccb57e5367feaf9798e1c787724fe5cbb218d66970d08bcf1e7af7d4a4a56baa4e1934aa9dae", 0xd9, r6)

22:23:24 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
pipe2(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4000)
ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f00000003c0)=0xbc)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="28004b85a15bea4b8fd40b8133ef97b125cd275b52a34888413b3e31dc1ffca105f31836f146aeb2ce7e983fe06595f350f9c1fb94ed21bc"])
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
write$sndseq(r4, &(0x7f00000004c0)=[{0x3, 0x80000000, 0x0, 0xffff, @time, {0x9, 0x1}, {0x3}, @queue={0xdd0, {0xff, 0x101}}}, {0xfffffffffffffff9, 0x80000001, 0x80, 0x400, @tick=0xffff, {0xfffffffffffffffb, 0x2}, {0x6, 0x8e19}, @control={0xee, 0x3, 0x1}}, {0x0, 0x0, 0x6, 0x5, @time={0x0, 0x989680}, {0x5, 0xd58}, {0x100000001, 0x10001}, @queue={0x0, {0x2f, 0x4}}}], 0x90)
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000600)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000029010000000000aa954c1519197eeeb323e353bd29d70c1b0c95f434fe2e90cc08386ed2ec9a495ca9e83fcd986b83a453c9244193124a04e107200dd4a3eb4700abe2fb5e2fa2c33b245901b2c12872789220e74bfad21899735f1ddce6f11d241869351235c5c60a4fc6e7c56ffed801a0"], 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)
lstat(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = getegid()
write$P9_RGETATTR(r4, &(0x7f0000000700)={0xa0, 0x19, 0x2, {0x1, {0x20, 0x2, 0x5}, 0x1, r5, r6, 0x80000000, 0x1, 0x1, 0x8, 0x8000, 0x7ff, 0x7ff, 0x5, 0x5, 0x0, 0x4, 0xcca3, 0x2, 0x3}}, 0xa0)

22:23:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:24 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:25 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200))
getresgid(&(0x7f0000000140)=<r3=>0x0, &(0x7f0000000380), &(0x7f00000004c0))
write$P9_RGETATTR(r2, &(0x7f0000000500)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x1}, 0x0, 0x0, r3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x40000000000000}}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:25 executing program 2:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x2040, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/22, 0x16}, {&(0x7f00000001c0)=""/193, 0xc1}], 0x2)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x2, 0x0, 0x8, 0x1, 0x1}})
r1 = gettid()
ptrace$pokeuser(0x6, r1, 0x2, 0x7)
r2 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x8}, 0x3, 0x5})
ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0))

22:23:25 executing program 3:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x40000, 0x0)
write$P9_RCREATE(r0, &(0x7f0000000140)={0x18, 0x73, 0x1, {{0x40, 0x0, 0x3}, 0x5}}, 0x18)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = getegid()
fchown(r1, r2, r3)
r4 = dup(r1)
setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r5, 0x2007fff)
sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:25 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  607.128172] FAT-fs (loop0): bogus number of reserved sectors
[  607.134708] FAT-fs (loop0): Can't find a valid FAT filesystem
[  607.139260] 9pnet: Insufficient options for proto=fd
[  607.156287] 9pnet: Insufficient options for proto=fd
22:23:25 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)

22:23:25 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x83fff)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:25 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

[  607.201043] 9pnet: Insufficient options for proto=fd
22:23:25 executing program 7:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)
ppoll(&(0x7f0000000100)=[{r2, 0x14}, {r1, 0x40}], 0x2, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000200)={0x3}, 0x8)
setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000240)=0xe071, 0x4)

22:23:25 executing program 1:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000140)="6548453188e7ebfc8ff192a51954760968c07965903d192d712abac164b707", 0x1f, 0x2000000c, &(0x7f00008d4fe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000200)=""/110)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100))

22:23:25 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4000004)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:25 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140))
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  607.383054] 9pnet: Insufficient options for proto=fd
[  607.406003] 9pnet: Insufficient options for proto=fd
22:23:25 executing program 1:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x8001, 0x4, 0x1, 0x5, 0x40d300af, 0x7f, 0x100000001, 0x9, 0x3, 0x6, 0xff, 0x7fffffff})

22:23:25 executing program 5:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x140, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x4002, 0x0)
fchdir(r0)
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8, 0x428100)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x80, 0x1}, 0x4)

[  607.437460] FAT-fs (loop0): bogus number of reserved sectors
[  607.445824] FAT-fs (loop0): Can't find a valid FAT filesystem
[  607.458290] 9pnet: Insufficient options for proto=fd
22:23:25 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000004c0)=<r3=>0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000500)=<r4=>0x0)
tgkill(r3, r4, 0x5)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
r5 = dup2(r2, r1)
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x0, 0x3}, {0xfffffffffffffffa, 0x9}, {0x7fff, 0x9}, {0x80000001, 0x1}, {0x9, 0x9}, {0x6, 0x401}]})
unshare(0x0)

[  607.471849] 9pnet: Insufficient options for proto=fd
22:23:25 executing program 1:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x8001, 0x4, 0x1, 0x5, 0x40d300af, 0x7f, 0x100000001, 0x9, 0x3, 0x6, 0xff, 0x7fffffff})

22:23:25 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:25 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x10000, &(0x7f00000002c0)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000540)={0xfef2, 0x4d, 0x2}, 0xfffffffffffffce3)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
r3 = open(&(0x7f0000000380)='./file0\x00', 0x80, 0x1)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000500)='fou\x00')
sendmsg$FOU_CMD_GET(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r4, 0x101, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000044}, 0x8040)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
r5 = gettid()
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
sched_getparam(r5, &(0x7f0000000140))

[  607.678350] FAT-fs (loop0): invalid media value (0x00)
[  607.687525] FAT-fs (loop0): Can't find a valid FAT filesystem
22:23:25 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0)
ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000080)=""/34)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, 0x10, r1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x5})

22:23:25 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="531b38270600"], 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:25 executing program 1:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x8001, 0x4, 0x1, 0x5, 0x40d300af, 0x7f, 0x100000001, 0x9, 0x3, 0x6, 0xff, 0x7fffffff})

22:23:25 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000180))
openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x8200, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0xfffffffffffffffd, 0xffefffffffffffff, 0x38398a62}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)

22:23:25 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:25 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140))

22:23:25 executing program 7:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffff9, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
tee(r0, r0, 0x8, 0x6d938618d3911e2c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000100)=0x1)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:25 executing program 3:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x140, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x4002, 0x0)
fchdir(r0)
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8, 0x428100)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x80, 0x1}, 0x4)

22:23:25 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
finit_module(r0, &(0x7f0000000380)='/dev/sequencer2\x00', 0x3)
r1 = dup3(r0, r0, 0x80000)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8)
pread64(r0, &(0x7f0000000540)=""/4096, 0x1000, 0x0)
sendto$packet(r1, &(0x7f0000000000)="f387e9bc9e89a163aec535e18ec5ab817cc1102dc9c460ed99b809", 0x1b, 0x4008850, &(0x7f0000000340)={0x11, 0x11, r2, 0x1, 0x5, 0x6, @dev={[], 0x10}}, 0x14)
recvfrom$unix(r1, &(0x7f0000000440)=""/91, 0x5b, 0x40000000, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:25 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
r3 = dup(r0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000004c0)={0x1, 0x2, 0x7ff, 0x0, 0x1})
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:25 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x4000)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080))
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x5})
syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x101000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0))

22:23:25 executing program 1:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x8001, 0x4, 0x1, 0x5, 0x40d300af, 0x7f, 0x100000001, 0x9, 0x3, 0x6, 0xff, 0x7fffffff})

22:23:25 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000001d4e61f4951faa27bd7d000000000000000000000000000000000000000000"], 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

[  608.040563] FAT-fs (loop0): invalid media value (0x00)
[  608.059599] FAT-fs (loop0): Can't find a valid FAT filesystem
22:23:25 executing program 3:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x140, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x4002, 0x0)
fchdir(r0)
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8, 0x428100)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x80, 0x1}, 0x4)

22:23:25 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x2020)

22:23:26 executing program 5:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000300)={0x2, 0x3, 0x7f, 0x907, 0x6941687f}, 0x14)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
r2 = accept4(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=0x80, 0x800)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000001c0)={0x100000000, {{0xa, 0x4e23, 0x6, @loopback, 0x7fffffff}}, {{0xa, 0x4e22, 0x1, @loopback, 0x6}}}, 0x108)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:26 executing program 1:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x8001, 0x4, 0x1, 0x5, 0x40d300af, 0x7f, 0x100000001, 0x9, 0x3, 0x6, 0xff, 0x7fffffff})

22:23:26 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x5})
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000001c0)=""/166, &(0x7f0000000040)=0xa6)

22:23:26 executing program 3:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x140, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x4002, 0x0)
fchdir(r0)
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8, 0x428100)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x80, 0x1}, 0x4)

22:23:26 executing program 1:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x8001, 0x4, 0x1, 0x5, 0x40d300af, 0x7f, 0x100000001, 0x9, 0x3, 0x6, 0xff, 0x7fffffff})

22:23:26 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x5})

[  608.320465] FAT-fs (loop0): invalid media value (0x00)
[  608.326322] FAT-fs (loop0): Can't find a valid FAT filesystem
22:23:26 executing program 7:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x400, 0x0)

22:23:26 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
write$P9_RREADDIR(r0, &(0x7f0000000140)={0x2a, 0x29, 0x1, {0x5, [{{0xf3, 0x2, 0x5}, 0x7fffffff, 0x8, 0x7, './file0'}]}}, 0x2a)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
write$P9_RREADDIR(r2, &(0x7f00000004c0)={0x68, 0x29, 0x1, {0x9d, [{{0x40, 0x4, 0x3}, 0x9d, 0x80, 0x7, './file0'}, {{0x84, 0x4, 0x8}, 0x1, 0xfffffffffffffffd, 0x7, './file0'}, {{0x48, 0x4, 0x6}, 0x7, 0x9, 0x7, './file0'}]}}, 0x68)
unshare(0x0)

22:23:26 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
rt_sigaction(0x7, &(0x7f0000000140)={0x2, {0x3}, 0x8000002, 0x8e0000000}, &(0x7f0000000380), 0x8, &(0x7f00000004c0))
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:26 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)

22:23:26 executing program 1:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x8001, 0x4, 0x1, 0x5, 0x40d300af, 0x7f, 0x100000001, 0x9, 0x3, 0x6, 0xff, 0x7fffffff})

22:23:26 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x8001, 0x4, 0x1, 0x5, 0x40d300af, 0x7f, 0x100000001, 0x9, 0x3, 0x6, 0xff, 0x7fffffff})

22:23:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:26 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x5})
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0)
r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00')
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1401140}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4008814)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)=<r3=>0x0)
ptrace$getsig(0x4202, r3, 0xac, &(0x7f0000000280))

22:23:26 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x8001, 0x4, 0x1, 0x5, 0x40d300af, 0x7f, 0x100000001, 0x9, 0x3, 0x6, 0xff, 0x7fffffff})

22:23:26 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0xc, 0x17, 0x5, 0x4, 0x7, 0x100000001, 0x5, 0xde}})

22:23:26 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
utimensat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x100)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:26 executing program 2:
socketpair$inet(0x2, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f00000000c0)=0x8)
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x5})

[  608.893762] FAT-fs (loop0): invalid media value (0x00)
[  608.906718] FAT-fs (loop0): Can't find a valid FAT filesystem
22:23:26 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000380)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)="40b148939e22279171836b70998f97a7e34670351f5b02d628103cd450294749c6f5d4e10061e8c6566a072f8f866f027b9fc6e74ee94c2afcaf7cb18fe3", 0x3e}], 0x1, &(0x7f0000000940)=[{0xb8, 0x1, 0x2, "c6ba5f9dd09296273f031ef75c3922f80746e830c29222c0a3f51b2ffe4774e6f22c5991a10de38900ce2d01738c11ba92d25246012a295a26df6f9725efc7ab25bdd56ca09f59a5898fd15b6e92cbd67d4af28662ca9fff0a6d2a21b17023bf9ef20991c46abf9b50e216dace405c86d25ce587c7125346309fa13ebcd3d14fd61fe23048fc83b9fd7c2977dd26c148b64aea6cad6a755b21dd35ba858abc8d81429308"}, {0xd0, 0x0, 0x2, "9af79e36e975fb58041e2b537d78041847e850d318196ed6017f74a5b0309b4d9644202c2c2b16a64f70947f0df1aa2ec5b9f36ae2b285daeb0528cf49a4223c0a8b93f66da75d573f8eb250a7951589976bb99250e11e68f1351143e279244a5bfc3571d059fa230ea79656181f180a5ae12cf93f07445bf70ec1787e102bb3e8ed17b4bf541348d1dae1e0c0046dfd09455da03f57810e78ab9f115a59406ea360e7d8fca5adb61f82f91d1ba96f668d15b9adf86a136b2d7dc7"}, {0x68, 0x114, 0x59, "3e6e6c4e77bf541d66b423cd46e8bbbbb4f6f35332b27766613a42a79049a0d8b4dbc5792aec552580aea94bcd64dc22ed64a639129f6f96de4c67b728f20a699b44e61420227e20013584cc7df589c3784c52"}, {0x1010, 0x100, 0x1, "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"}, {0xc8, 0x11, 0x5, "0c7f5d4f403db3ef3536367950bd9eabf0c7d6229f44cb2b26d8a43f54b4f02a6e1e4aa700f12a75ec74112a4c9f52d7c63dcc7c579ccf150774d82636f091d673cdab5b55fa2de1510819d117ac8f385887d48a04da5170b026ca5341fa3af25cfbfdf143f2ff732f3bdcba60799d8eff675d23cd96a541132fc8c755abe1564902f4bdb1c08dcb0181309bf33d7f62e11c3f5fbe723f35aa22c4320b2b5c139e882f4859f4ef284946cce1030f53eada02"}, {0xd0, 0x113, 0x2, "13eabc17496b6eb83c5f36869291ea7c75bb0b42ccbe99b6bffce144b784f9aca2ddc408e7e88dde5afee406d9d459eada2d40296e76bbcc4e6e32c17c02a861dc03d1ab39cee21779cc731f440933c66833ca6639e68f14cc8b42dd9006d4034e6a351bff81a8d6574145ba06e757dea4b99973ccab88f3555e37af8d9a51ed47a33f1feff05384c1fb07d0f9003352b3b0505bd8b4dd0333aa247c3f0122f4f9c29e935c683040d909210a62b9c9b3b4f90d1bd1d022709d0135ed599573"}], 0x1398, 0x4044040}, 0x4000000)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="6ce237189df15802d79643b180c83838801f1a8ea48057907529e4ffd4260597c185e129cf311945503f7bfb81cd0dae01241738a11e62664029f001823c06e18f80a7dd7bc7e707291925737cd555"])
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="4be6ac852fc70b000000290100fffffff0337ad1d77d701f2dd7e8d7497fe3a07891199e0a1e82eed67b2020e5cab3272553b1dd6d336034dda8e4b723043a50da558ce961e85fcf6f2c40df6c47c6c0fc85d3bffac9b9d2ab7c7da73357a95637cb240c1c25d803f8f9cf9c434db9a991e12c6c64882707c5c831855653d90350f9e479e5344f35039cbb19dd0364bebceb3ac62339d3fd4918b12e15b00000563584dac0a736caf3c6e0aa1aac"], 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[{0x0, 0x7}, {0x8}, {0x3, 0x6}, {0x7, 0x400}, {0x8, 0x8}, {0x0, 0x100000000}], 0x6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:26 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x8001, 0x4, 0x1, 0x5, 0x40d300af, 0x7f, 0x100000001, 0x9, 0x3, 0x6, 0xff, 0x7fffffff})

22:23:26 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x8001, 0x4, 0x1, 0x5, 0x40d300af, 0x7f, 0x100000001, 0x9, 0x3, 0x6, 0xff, 0x7fffffff})

22:23:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

[  609.090044] FAT-fs (loop0): invalid media value (0x00)
[  609.096132] FAT-fs (loop0): Can't find a valid FAT filesystem
[  609.129733] 9pnet: Insufficient options for proto=fd
[  609.173880] 9pnet: Insufficient options for proto=fd
22:23:27 executing program 7:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x143002, 0x1)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x2)
r1 = socket$inet6(0xa, 0x80000000e, 0xd46f)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
mkdir(&(0x7f0000000200)='./bus\x00', 0x40)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@ipv4={[], [], @loopback}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000780)=0xe8)
connect$packet(r2, &(0x7f00000007c0)={0x11, 0xff, r3, 0x1, 0x1, 0x6, @random="d79715b369e3"}, 0x14)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r4, 0x2007fff)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:27 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0xc, 0x17, 0x5, 0x4, 0x7, 0x100000001, 0x5, 0xde}})

22:23:27 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x8001, 0x4, 0x1, 0x5, 0x40d300af, 0x7f, 0x100000001, 0x9, 0x3, 0x6, 0xff, 0x7fffffff})

22:23:27 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
clock_gettime(0x0, &(0x7f0000002300)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002200)=[{{&(0x7f0000000140)=@ipx, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)=""/1, 0x1}, {&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000280)=""/121, 0x79}], 0x4, &(0x7f0000000340)=""/185, 0xb9, 0x3}, 0x7}, {{&(0x7f0000000400), 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000540)=""/135, 0x87, 0x6}, 0x8}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000600)=""/147, 0x93}, {&(0x7f00000006c0)=""/15, 0xf}, {&(0x7f0000000700)=""/210, 0xd2}, {&(0x7f0000000800)=""/160, 0xa0}, {&(0x7f00000008c0)=""/119, 0x77}, {&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000980)=""/183, 0xb7}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/220, 0xdc}, {&(0x7f0000001b40)=""/122, 0x7a}], 0xa, &(0x7f0000001c80)=""/8, 0x8, 0x5}, 0x9}, {{&(0x7f0000001cc0)=@alg, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001d40)=""/170, 0xaa}, {&(0x7f0000001e00)=""/117, 0x75}, {&(0x7f0000001e80)=""/99, 0x63}, {&(0x7f0000001f00)=""/125, 0x7d}, {&(0x7f0000001f80)=""/20, 0x14}, {&(0x7f0000001fc0)=""/247, 0xf7}], 0x6, &(0x7f0000002140)=""/159, 0x9f, 0x8}, 0x4}], 0x4, 0x40002142, &(0x7f0000002340)={r1, r2+30000000})
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:27 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x42)
rt_sigsuspend(&(0x7f00000000c0)={0xf35}, 0x8)
ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x2, 0x1, 0x30, 'queue1\x00', 0x6})
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x5})

22:23:27 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b02000029010000000000"], 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:27 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:27 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
ioctl$int_out(r2, 0x5460, &(0x7f0000000140))
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000004c0)={0xcb, 0x29, 0x1, {0x4, [{{0x40, 0x4}, 0x7, 0x3572, 0x7, './file0'}, {{0x30, 0x0, 0x4}, 0xffff, 0x40, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0xb0b, 0xdd5980d, 0x7, './file0'}, {{0x98, 0x2, 0x8}, 0xfffffffffffffff9, 0x5, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0x8, 0x2, 0x7, './file0'}, {{0x0, 0x0, 0x80000000}, 0x6, 0x200, 0xd, './file0/file0'}]}}, 0xcb)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:27 executing program 1:
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x8001, 0x4, 0x1, 0x5, 0x40d300af, 0x7f, 0x100000001, 0x9, 0x3, 0x6, 0xff, 0x7fffffff})

22:23:27 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
utimensat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x100)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)

22:23:27 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201e})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', <r6=>0x0})
write$P9_RREAD(r1, &(0x7f0000000540)={0x30, 0x75, 0x2, {0x25, "b33d91a09c6560f4cd00df537092dfb3e980ff701aa2a902a629b0e9f86ddeb7874def1a86"}}, 0x30)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @random="b286998f745e"}, 0x10)
close(r5)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r2, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7)
write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14)
r7 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000008, 0x12, 0xffffffffffffff9c, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000380)={r7})
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0))
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000400)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0)
unshare(0x0)

22:23:27 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x28000, 0x0)
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000000c0))
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x5, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)

22:23:27 executing program 1:
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x8001, 0x4, 0x1, 0x5, 0x40d300af, 0x7f, 0x100000001, 0x9, 0x3, 0x6, 0xff, 0x7fffffff})

22:23:27 executing program 7:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000140)=0x2)
sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100))
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r2, 0x2007fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

[  609.799395] FAT-fs (loop0): invalid media value (0x00)
[  609.805233] FAT-fs (loop0): Can't find a valid FAT filesystem
22:23:27 executing program 3:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffff9, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
tee(r0, r0, 0x8, 0x6d938618d3911e2c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000100)=0x1)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

22:23:27 executing program 0:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = socket$packet(0x11, 0x808000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000340)={0x0, 0x1, 'client0\x00', 0xffffffff80000000, "1079196edc7c0f02", "9a2fa85d14fef9ca954c5deb9815754328e9e80140003a3c48313c73f1bdb2c2", 0x8, 0x3f})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0)
truncate(&(0x7f0000000280)='./file0\x00', 0x100007)
getdents(r1, &(0x7f0000000400)=""/240, 0xf0)

22:23:27 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0xfffffffffffffffa, 0x400000)
r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0xa000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
write$P9_RLINK(r2, &(0x7f00000001c0)={0x7, 0x47, 0x1}, 0x7)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0)
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000140)="d2a6ab05fc40822632ada3e714df87a2b0540b7bcf780b2e6f08a2")
symlinkat(&(0x7f0000000040)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00')

22:23:27 executing program 1:
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x8001, 0x4, 0x1, 0x5, 0x40d300af, 0x7f, 0x100000001, 0x9, 0x3, 0x6, 0xff, 0x7fffffff})

22:23:27 executing program 1:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x8001, 0x4, 0x1, 0x5, 0x40d300af, 0x7f, 0x100000001, 0x9, 0x3, 0x6, 0xff, 0x7fffffff})

[  610.001155] device veth1_to_team entered promiscuous mode
22:23:27 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x100, 0x0)

[  610.046209] FAT-fs (loop0): invalid media value (0x00)
[  610.051925] FAT-fs (loop0): Can't find a valid FAT filesystem
[  610.142194] device veth1_to_team left promiscuous mode
22:23:28 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000200)={{0x0, 0x0, 0x2, 0x3, 0x8}, 0x800, 0xa237})
r2 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)='cgroup(\x00', 0xfffffffffffffffc)
keyctl$link(0x8, r1, r2)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x2}, 0x3, 0x5})

[  859.301716] INFO: task syz-executor4:15630 blocked for more than 140 seconds.
[  859.309015]       Not tainted 4.9.116-g0137ea2 #18
[  859.314052] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  859.322248] syz-executor4   D29088 15630  10564 0x00000004
[  859.328024]  ffff8801d706c800 ffff8801cfeb5f80 ffff8801cfeb5f80 ffff88019d693000
[  859.336137]  ffff8801db321c18 ffff8801a6d57988 ffffffff839ead0d ffffffff81235647
[  859.344252]  0000000000000000 ffff8801d706d0c0 0000000600000007 ffff8801db3224e8
[  859.352306] Call Trace:
[  859.354897]  [<ffffffff839ead0d>] ? __schedule+0x64d/0x1bd0
[  859.360639]  [<ffffffff81235647>] ? mark_held_locks+0xc7/0x130
[  859.366994]  [<ffffffff839ec30f>] schedule+0x7f/0x1b0
[  859.372324]  [<ffffffff839f7948>] rwsem_down_write_failed+0x598/0x990
[  859.378903]  [<ffffffff839f753c>] ? rwsem_down_write_failed+0x18c/0x990
[  859.385691]  [<ffffffff8153ac63>] ? save_stack+0x43/0xd0
[  859.391165]  [<ffffffff839f73b0>] ? rwsem_down_write_failed_killable+0xb40/0xb40
[  859.398726]  [<ffffffff81d0800e>] ? cred_has_capability+0x14e/0x2e0
[  859.405251]  [<ffffffff812361b0>] ? debug_check_no_locks_freed+0x210/0x210
[  859.412280]  [<ffffffff839fb2f5>] ? _raw_spin_unlock_irqrestore+0x45/0x70
[  859.419203]  [<ffffffff81ee8987>] call_rwsem_down_write_failed+0x17/0x30
[  859.426068]  [<ffffffff839f571c>] down_write+0x5c/0xa0
[  859.431348]  [<ffffffff815f115b>] ? vfs_setxattr+0x8b/0xe0
[  859.436997]  [<ffffffff815f115b>] vfs_setxattr+0x8b/0xe0
[  859.442455]  [<ffffffff815f136c>] setxattr+0x1bc/0x270
[  859.447724]  [<ffffffff815f11b0>] ? vfs_setxattr+0xe0/0xe0
[  859.453378]  [<ffffffff815a8e97>] ? getname_flags+0xc7/0x580
[  859.459181]  [<ffffffff81230222>] ? __lock_is_held+0xa2/0xf0
[  859.465010]  [<ffffffff8127c183>] ? rcu_read_lock_sched_held+0x103/0x120
[  859.471858]  [<ffffffff811bbf3d>] ? preempt_count_add+0x7d/0x170
[  859.477999]  [<ffffffff815e0b33>] ? __mnt_want_write+0x1e3/0x270
[  859.484295]  [<ffffffff815f1587>] path_setxattr+0x167/0x180
[  859.490015]  [<ffffffff815f1420>] ? setxattr+0x270/0x270
[  859.495806]  [<ffffffff81576aa0>] ? SyS_write+0x130/0x1c0
[  859.501331]  [<ffffffff81576970>] ? SyS_read+0x1c0/0x1c0
[  859.506794]  [<ffffffff815f194b>] SyS_setxattr+0x3b/0x50
[  859.512265]  [<ffffffff815f1910>] ? vfs_getxattr_alloc+0x370/0x370
[  859.518617]  [<ffffffff81006316>] do_syscall_64+0x1a6/0x490
[  859.524368]  [<ffffffff839fbc13>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[  859.531326] 
[  859.531326] Showing all locks held in the system:
[  859.537681] 2 locks held by khungtaskd/519:
[  859.542038]  #0:  (rcu_read_lock){......}, at: [<ffffffff8136677c>] watchdog+0x11c/0xa20
[  859.550741]  #1:  (tasklist_lock){.+.+..}, at: [<ffffffff81425e07>] debug_show_all_locks+0x79/0x218
[  859.560421] 2 locks held by rs:main Q:Reg/3641:
[  859.565092]  #0:  (&f->f_pos_lock){+.+.+.}, at: [<ffffffff815d835c>] __fdget_pos+0xac/0xd0
[  859.573971]  #1:  (sb_writers#3){.+.+.+}, at: [<ffffffff81572e3e>] vfs_write+0x3ae/0x530
[  859.582804] 2 locks held by getty/3739:
[  859.586748]  #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff839f9db2>] ldsem_down_read+0x32/0x40
[  859.596105]  #1:  (&ldata->atomic_read_lock){+.+.+.}, at: [<ffffffff82120212>] n_tty_read+0x202/0x16e0
[  859.606032] 2 locks held by syz-executor4/15558:
[  859.610758]  #0:  (sb_writers#15){.+.+.+}, at: [<ffffffff815e0bff>] mnt_want_write+0x3f/0xb0
[  859.619967]  #1:  (&sb->s_type->i_mutex_key#15){++++++}, at: [<ffffffff815f115b>] vfs_setxattr+0x8b/0xe0
[  859.630204] 2 locks held by syz-executor4/15630:
[  859.634963]  #0:  (sb_writers#15){.+.+.+}, at: [<ffffffff815e0bff>] mnt_want_write+0x3f/0xb0
[  859.644135]  #1:  (&sb->s_type->i_mutex_key#15){++++++}, at: [<ffffffff815f115b>] vfs_setxattr+0x8b/0xe0
[  859.654356] 
[  859.655960] =============================================
[  859.655960] 
[  859.663054] NMI backtrace for cpu 1
[  859.666731] CPU: 1 PID: 519 Comm: khungtaskd Not tainted 4.9.116-g0137ea2 #18
[  859.673977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  859.683314]  ffff8801d8b97d08 ffffffff81eb46a9 0000000000000000 0000000000000001
[  859.691322]  0000000000000001 0000000000000001 ffffffff810b9bd0 ffff8801d8b97d40
[  859.699296]  ffffffff81ebf9a7 0000000000000001 0000000000000000 0000000000000003
[  859.707274] Call Trace:
[  859.709838]  [<ffffffff81eb46a9>] dump_stack+0xc1/0x128
[  859.715173]  [<ffffffff810b9bd0>] ? irq_force_complete_move+0x320/0x320
[  859.721897]  [<ffffffff81ebf9a7>] nmi_cpu_backtrace.cold.2+0x48/0x87
[  859.728360]  [<ffffffff810b9bd0>] ? irq_force_complete_move+0x320/0x320
[  859.735086]  [<ffffffff81ebf93a>] nmi_trigger_cpumask_backtrace+0x12a/0x14f
[  859.742186]  [<ffffffff810b9cd4>] arch_trigger_cpumask_backtrace+0x14/0x20
[  859.749175]  [<ffffffff81366d14>] watchdog+0x6b4/0xa20
[  859.754422]  [<ffffffff8136677c>] ? watchdog+0x11c/0xa20
[  859.759844]  [<ffffffff8119d0ad>] kthread+0x26d/0x300
[  859.765005]  [<ffffffff81366660>] ? reset_hung_task_detector+0x20/0x20
[  859.771640]  [<ffffffff8119ce40>] ? kthread_park+0xa0/0xa0
[  859.777234]  [<ffffffff8119ce40>] ? kthread_park+0xa0/0xa0
[  859.782832]  [<ffffffff8119ce40>] ? kthread_park+0xa0/0xa0
[  859.788431]  [<ffffffff839fbddc>] ret_from_fork+0x5c/0x70
[  859.794099] Sending NMI from CPU 1 to CPUs 0:
[  859.798610] NMI backtrace for cpu 0 skipped: idling at pc 0xffffffff839fa816
[  859.805994] Kernel panic - not syncing: hung_task: blocked tasks
[  859.812123] CPU: 1 PID: 519 Comm: khungtaskd Not tainted 4.9.116-g0137ea2 #18
[  859.819369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  859.828708]  ffff8801d8b97cc8 ffffffff81eb46a9 ffffffff83c8bc20 00000000ffffffff
[  859.836692]  0000000000000000 0000000000000001 dffffc0000000000 ffff8801d8b97d88
[  859.844689]  ffffffff81421a75 0000000041b58ab3 ffffffff843bbff8 ffffffff814218b6
[  859.852682] Call Trace:
[  859.855242]  [<ffffffff81eb46a9>] dump_stack+0xc1/0x128
[  859.860577]  [<ffffffff81421a75>] panic+0x1bf/0x3bc
[  859.865563]  [<ffffffff814218b6>] ? add_taint.cold.6+0x16/0x16
[  859.871506]  [<ffffffff81003066>] ? ___preempt_schedule+0x16/0x18
[  859.877707]  [<ffffffff81ebf910>] ? nmi_trigger_cpumask_backtrace+0x100/0x14f
[  859.884952]  [<ffffffff81366d25>] watchdog+0x6c5/0xa20
[  859.890199]  [<ffffffff8136677c>] ? watchdog+0x11c/0xa20
[  859.895630]  [<ffffffff8119d0ad>] kthread+0x26d/0x300
[  859.900794]  [<ffffffff81366660>] ? reset_hung_task_detector+0x20/0x20
[  859.907433]  [<ffffffff8119ce40>] ? kthread_park+0xa0/0xa0
[  859.913027]  [<ffffffff8119ce40>] ? kthread_park+0xa0/0xa0
[  859.918623]  [<ffffffff8119ce40>] ? kthread_park+0xa0/0xa0
[  859.924219]  [<ffffffff839fbddc>] ret_from_fork+0x5c/0x70
[  859.930154] Dumping ftrace buffer:
[  859.933823]    (ftrace buffer empty)
[  859.937508] Kernel Offset: disabled
[  859.941115] Rebooting in 86400 seconds..