)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:02 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:02 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:02 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:02 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:02 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:02 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:02 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:37:02 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:03 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r7, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:03 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:03 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:37:03 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:03 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:03 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:03 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:03 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:03 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r7, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:03 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:03 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:03 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:37:04 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:04 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:04 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:04 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:04 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:04 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:04 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:04 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r7, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:04 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:04 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:04 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:04 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r1, r4, 0x0, 0x800000080004103)

[  120.622285][ T2111] 9pnet: Insufficient options for proto=fd
21:37:04 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:04 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:04 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r1, r4, 0x0, 0x800000080004103)

21:37:04 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:04 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:05 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:05 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r1, r4, 0x0, 0x800000080004103)

[  121.420827][ T2131] 9pnet: Insufficient options for proto=fd
21:37:05 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:05 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:05 executing program 4:
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  121.462389][ T2140] 9pnet: Insufficient options for proto=fd
21:37:05 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

[  121.522904][ T2149] fuse: Bad value for 'fd'
21:37:05 executing program 4:
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  121.575868][ T2155] fuse: Bad value for 'fd'
21:37:05 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:05 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:05 executing program 4:
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:05 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:05 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:06 executing program 4:
mkdir(0x0, 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:06 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

[  122.408594][ T2176] fuse: Bad value for 'fd'
21:37:06 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:06 executing program 4:
mkdir(0x0, 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:06 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:06 executing program 4:
mkdir(0x0, 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:06 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:06 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e)

21:37:06 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r1, r4, 0x0, 0x800000080004103)

21:37:06 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:06 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:06 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:07 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:07 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r1, r4, 0x0, 0x800000080004103)

21:37:07 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:07 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:07 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r1, r4, 0x0, 0x800000080004103)

[  123.397370][ T2220] 9pnet: Insufficient options for proto=fd
[  123.433865][ T2233] 9pnet: Insufficient options for proto=fd
21:37:07 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, 0x0)

21:37:07 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  123.491187][ T2241] 9pnet: Insufficient options for proto=fd
21:37:07 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:07 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, 0x0)

21:37:07 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e)

21:37:09 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:09 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:09 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, 0x0)

21:37:09 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e)

21:37:09 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e)

21:37:09 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:10 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:10 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, 0x0, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:10 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:10 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, 0x0, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  126.443002][ T2290] fuse: Bad value for 'fd'
21:37:10 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:10 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, 0x0, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  126.481814][ T2295] fuse: Bad value for 'fd'
[  126.523427][ T2305] fuse: Bad value for 'fd'
21:37:13 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:13 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:13 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:13 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:13 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:13 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:13 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:13 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:37:13 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  129.443142][ T2327] fuse: Invalid rootmode
21:37:13 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

[  129.486293][ T2338] fuse: Invalid rootmode
21:37:13 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  129.514561][ T2345] fuse: Invalid rootmode
21:37:13 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:13 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:16 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:16 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:16 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:16 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r7, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:16 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r7, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:16 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:16 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:16 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:16 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:16 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:16 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:16 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:19 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:19 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff01800000080039503230"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:19 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:19 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:19 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:19 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:19 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:19 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff01800000080039503230"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:19 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:19 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff01800000080039503230"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:19 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:19 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:22 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:22 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:22 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:37:22 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:22 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:22 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:22 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:22 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:22 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:22 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:22 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:22 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')

21:37:25 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:25 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:25 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

21:37:25 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:25 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:37:25 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:25 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:25 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup(r3)

21:37:25 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:25 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup(r3)

21:37:25 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:26 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:26 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:26 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup(r3)

21:37:26 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:37:26 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:26 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:26 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

21:37:26 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:26 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

21:37:26 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:26 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

21:37:26 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:26 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:26 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:26 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:27 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:27 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:27 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:27 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

21:37:27 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:27 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:27 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:27 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

21:37:27 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:27 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:27 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:27 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
dup(r1)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:28 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:28 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:28 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
dup(r1)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:28 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, 0x0, &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:28 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, 0x0, &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:28 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:28 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
dup(r1)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:28 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, 0x0, &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:28 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:28 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:28 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:28 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:29 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:29 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:29 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:29 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:37:29 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:37:29 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:29 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:37:29 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:29 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:37:29 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:29 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

[  145.710645][ T2810] 9pnet: Insufficient options for proto=fd
[  145.778372][ T2817] 9pnet: Insufficient options for proto=fd
21:37:29 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:30 executing program 1:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:30 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:37:30 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(r1)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:30 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  146.444077][ T2835] 9pnet: Insufficient options for proto=fd
[  146.500729][ T2844] 9pnet: Insufficient options for proto=fd
21:37:30 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:30 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:30 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:30 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

21:37:30 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:30 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[  146.715394][ T2858] 9pnet: Insufficient options for proto=fd
[  146.723922][ T2859] 9pnet: Insufficient options for proto=fd
21:37:30 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[  146.765226][ T2864] 9pnet: Insufficient options for proto=fd
[  146.775160][ T2863] 9pnet: Insufficient options for proto=fd
[  146.804768][ T2868] 9pnet: Insufficient options for proto=fd
21:37:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:30 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:30 executing program 5:
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(r1)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:30 executing program 1:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:31 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:31 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:31 executing program 5:
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(r1)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:31 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:31 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:31 executing program 5:
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(r1)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:31 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:31 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:31 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:37:31 executing program 5:
mkdir(0x0, 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(r1)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:31 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:31 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:31 executing program 1:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:31 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:32 executing program 5:
mkdir(0x0, 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(r1)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:32 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:32 executing program 5:
mkdir(0x0, 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(r1)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:32 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103)

21:37:32 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

21:37:32 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[  148.494502][ T2959] 9pnet: Insufficient options for proto=fd
[  148.523411][ T2966] 9pnet: Insufficient options for proto=fd
21:37:32 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

21:37:32 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

21:37:32 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:32 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103)

21:37:32 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:32 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:33 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103)

21:37:33 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:33 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:33 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

[  149.420000][ T2998] 9pnet: Insufficient options for proto=fd
21:37:33 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:33 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040), &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:33 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

21:37:33 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:37:33 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:37:33 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, 0x0, &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:33 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:33 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, 0x0, &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:33 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:37:34 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, 0x0, &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:34 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:37:34 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:34 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:36 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040), &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:36 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:36 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:37:36 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:37:36 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:36 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

21:37:36 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180), 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

21:37:36 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:37:36 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:36 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r4, 0x0, 0x800000080004103)

21:37:36 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180), 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

21:37:36 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180), 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

21:37:39 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040), &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:39 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:39 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:39 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:37:39 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r4, 0x0, 0x800000080004103)

21:37:39 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$key(0xf, 0x3, 0x2)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:37:39 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r4, 0x0, 0x800000080004103)

21:37:39 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:39 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040), &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

[  155.587673][ T3144] 9pnet: Insufficient options for proto=fd
21:37:39 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:37:39 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:39 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[  155.633395][ T3155] 9pnet: Insufficient options for proto=fd
[  155.656680][ T3161] 9pnet: Insufficient options for proto=fd
[  155.696428][ T3166] 9pnet: Insufficient options for proto=fd
21:37:42 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:42 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:42 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:37:42 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:37:42 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$key(0xf, 0x3, 0x2)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:37:42 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:37:42 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:37:42 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:42 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040), &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

[  158.615936][ T3195] 9pnet: Insufficient options for proto=fd
21:37:42 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  158.660602][ T3206] 9pnet: Insufficient options for proto=fd
21:37:42 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:42 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:37:45 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:45 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:45 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:45 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004103)

21:37:45 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$key(0xf, 0x3, 0x2)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:37:45 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004103)

21:37:45 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040), &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:45 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:45 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:45 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004103)

21:37:45 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, 0x0)
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:45 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:45 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:37:48 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:48 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, 0x0)
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:48 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:48 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:37:48 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:37:48 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:48 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:37:48 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, 0x0)
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:48 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:48 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:48 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004103)

21:37:48 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:51 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:51 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:51 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:51 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004103)

21:37:51 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:37:51 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:51 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004103)

21:37:51 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:51 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:51 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:51 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103)

21:37:51 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:54 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:54 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:54 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103)

21:37:54 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:54 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:37:54 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:54 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103)

21:37:54 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:54 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:54 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x0)

21:37:54 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

21:37:54 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:37:57 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:37:57 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x0)

21:37:57 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

21:37:57 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:37:57 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:37:57 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:37:57 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x0)

21:37:57 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:37:57 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

21:37:57 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:57 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:37:57 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)

21:38:00 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:00 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:00 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)

21:38:00 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:00 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:38:00 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:00 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:00 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r1, r4, 0x0, 0x800000080004103)

21:38:00 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:00 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r1, r4, 0x0, 0x800000080004103)

[  176.792406][ T3572] 9pnet: Insufficient options for proto=fd
21:38:00 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:00 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)

21:38:00 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:00 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r1, r4, 0x0, 0x800000080004103)

[  176.948109][ T3586] 9pnet: Insufficient options for proto=fd
21:38:00 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:00 executing program 0:
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  177.025891][ T3600] 9pnet: Insufficient options for proto=fd
21:38:01 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:38:03 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:03 executing program 0:
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:03 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)

21:38:03 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:03 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:03 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:38:03 executing program 0:
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:03 executing program 0:
mkdir(0x0, 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:03 executing program 0:
mkdir(0x0, 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:03 executing program 0:
mkdir(0x0, 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:03 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:38:03 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r1, r4, 0x0, 0x800000080004103)

[  179.913201][ T3660] 9pnet: Insufficient options for proto=fd
21:38:06 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:06 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r1, r4, 0x0, 0x800000080004103)

21:38:06 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:06 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r1, r4, 0x0, 0x800000080004103)

21:38:06 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:38:06 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:06 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:06 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r1, r4, 0x0, 0x800000080004103)

21:38:06 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

[  182.799275][ T3675] 9pnet: Insufficient options for proto=fd
[  182.807264][ T3677] 9pnet: Insufficient options for proto=fd
21:38:06 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:06 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:06 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  182.845178][ T3692] 9pnet: Insufficient options for proto=fd
21:38:07 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:07 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:07 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:07 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:38:07 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, 0x0, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:09 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:09 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:09 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, 0x0, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:09 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:38:09 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:09 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:09 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, 0x0, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:09 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:09 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:09 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:09 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:09 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:12 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$key(0xf, 0x3, 0x2)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:38:12 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:12 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:12 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:12 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:12 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:38:12 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:12 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:12 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:12 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:12 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:12 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:13 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:13 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff01800000080039503230"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:13 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:13 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:13 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:13 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:38:13 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff01800000080039503230"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:13 executing program 5:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:13 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff01800000080039503230"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:13 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:13 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:13 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:13 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:13 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:14 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:14 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:14 executing program 2:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:14 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:14 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:14 executing program 5:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:14 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:38:14 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:14 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:15 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:15 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:15 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:15 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:15 executing program 2:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:15 executing program 4:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:15 executing program 5:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:15 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:15 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:15 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:15 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:15 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:16 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:16 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:16 executing program 2:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:16 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:16 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$key(0xf, 0x3, 0x2)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:38:16 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:16 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:16 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:16 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:16 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:16 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:17 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:17 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, 0x0, &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:17 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:17 executing program 2:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:17 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, 0x0, &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:17 executing program 4:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:17 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, 0x0, &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:17 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:17 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:17 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:17 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:17 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:17 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:17 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:17 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:38:18 executing program 2:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:18 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:38:18 executing program 4:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:18 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103)

21:38:18 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x0, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:18 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:38:18 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x0, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:18 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:18 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:38:18 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:18 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x0, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:18 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  194.870015][ T4163] 9pnet: Insufficient options for proto=fd
21:38:19 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:38:19 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:19 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:19 executing program 2:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:19 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:19 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r2, r5, 0x0, 0x800000080004103)

21:38:19 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  195.682506][ T4185] 9pnet: Insufficient options for proto=fd
21:38:19 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  195.761527][ T4198] 9pnet: Insufficient options for proto=fd
21:38:19 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:19 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:19 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  195.819389][ T4207] 9pnet: Insufficient options for proto=fd
[  195.857985][ T4210] 9pnet: Insufficient options for proto=fd
21:38:19 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  195.890088][ T4215] 9pnet: Insufficient options for proto=fd
21:38:19 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:19 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:20 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:20 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:20 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:20 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:20 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:20 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:20 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:20 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:20 executing program 4:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:20 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:20 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:20 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:21 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:21 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:21 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:21 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:21 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x0, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:21 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:21 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x0, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:21 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:21 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x0, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:21 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:21 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:21 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:22 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:22 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:22 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:22 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:22 executing program 4:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:22 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:22 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:22 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:22 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:22 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:22 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:22 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:23 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:23 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:23 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:23 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:23 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:23 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:23 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:23 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:23 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:23 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:24 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)

21:38:24 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)

21:38:24 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:24 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:24 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, 0x0)
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:24 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:24 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:25 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)

21:38:25 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, 0x0)
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:25 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)

21:38:25 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, 0x0)
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:25 executing program 3:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, 0x0)
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:25 executing program 3:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:25 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004103)

21:38:25 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:25 executing program 3:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:25 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004103)

21:38:25 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:25 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:26 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:26 executing program 3:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:26 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004103)

21:38:26 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:26 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:26 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:38:26 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103)

21:38:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:26 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:26 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103)

21:38:27 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103)

21:38:27 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:27 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103)

21:38:27 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x0)

21:38:27 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:38:27 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:27 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x0)

21:38:27 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:27 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))

21:38:28 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x0)

21:38:28 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:28 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x0)

21:38:28 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:28 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))

21:38:29 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:29 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:29 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:38:29 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:29 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:29 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))

21:38:30 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:30 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

21:38:30 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:38:30 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:30 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

21:38:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:30 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

21:38:31 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

21:38:31 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:38:31 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

21:38:31 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)

21:38:31 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(0xffffffffffffffff, r5, 0x0, 0x800000080004103)

21:38:31 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:31 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:32 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:32 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)

21:38:32 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:32 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

21:38:33 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:33 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:33 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)

21:38:33 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

21:38:33 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:38:34 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:34 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:34 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:34 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:38:34 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:34 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:34 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:34 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

21:38:34 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r4, 0x0, 0x800000080004103)

21:38:34 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

21:38:35 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0)

21:38:35 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)

21:38:35 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:35 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:35 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r5, 0x0, 0x800000080004103)

21:38:35 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0)

21:38:35 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:38:35 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:38:35 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)

21:38:35 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup(r3)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:38:36 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup(r3)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:38:36 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup(r3)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:38:36 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)

21:38:36 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:36 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:36 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:36 executing program 0:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0)

21:38:36 executing program 0:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0)

21:38:36 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)

21:38:37 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x140084}}, 0x50)
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r8, 0x0, 0x800000080004103)

21:38:37 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

21:38:37 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0)

21:38:37 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:37 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r7, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:37 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x140084}}, 0x50)
write$FUSE_ENTRY(r5, &(0x7f00000001c0)={0x90, 0x0, r7, {0x1, 0x0, 0x5091, 0x8001, 0x78dda554, 0x278, {0x1, 0x7, 0xffffffffffffff01, 0x101, 0xfff, 0x5, 0x2, 0x20, 0x919, 0x1000, 0x400, 0xee00, 0x0, 0x3, 0x2}}}, 0x90)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103)

21:38:37 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)

21:38:38 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='xen_mmu_pmd_clear\x00', r3}, 0x10)

21:38:38 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0))
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:38 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x140084}}, 0x50)
write$FUSE_ENTRY(r5, &(0x7f00000001c0)={0x90, 0x0, r7, {0x1, 0x0, 0x5091, 0x8001, 0x78dda554, 0x278, {0x1, 0x7, 0xffffffffffffff01, 0x101, 0xfff, 0x5, 0x2, 0x20, 0x919, 0x1000, 0x400, 0xee00, 0x0, 0x3, 0x2}}}, 0x90)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103)

21:38:38 executing program 0 (fault-call:8 fault-nth:0):
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:38 executing program 1 (fault-call:12 fault-nth:0):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  214.940018][ T5105] FAULT_INJECTION: forcing a failure.
[  214.940018][ T5105] name failslab, interval 1, probability 0, space 0, times 1
[  214.961111][ T5105] CPU: 1 PID: 5105 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  214.971170][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  214.981217][ T5105] Call Trace:
[  214.984485][ T5105]  dump_stack+0x1dd/0x24e
[  214.988792][ T5105]  ? devkmsg_release+0x11c/0x11c
[  214.993723][ T5105]  ? show_regs_print_info+0x12/0x12
[  214.998895][ T5105]  ? is_bpf_text_address+0x290/0x2b0
[  215.004155][ T5105]  ? stack_trace_save+0x1f0/0x1f0
[  215.009156][ T5105]  should_fail+0x6fb/0x860
[  215.013554][ T5105]  ? setup_fault_attr+0x3d0/0x3d0
[  215.018563][ T5105]  ? refcount_inc_not_zero_checked+0x1a6/0x280
[  215.024762][ T5105]  ? alloc_pipe_info+0x9f/0x3a0
[  215.029610][ T5105]  should_failslab+0x5/0x20
[  215.034137][ T5105]  kmem_cache_alloc_trace+0x39/0x290
[  215.039508][ T5105]  ? debug_smp_processor_id+0x20/0x20
[  215.044856][ T5105]  alloc_pipe_info+0x9f/0x3a0
[  215.049520][ T5105]  splice_direct_to_actor+0x94e/0xb00
[  215.054885][ T5105]  ? refcount_sub_and_test_checked+0x1bb/0x290
[  215.061028][ T5105]  ? avc_policy_seqno+0x17/0x70
[  215.065869][ T5105]  ? do_splice_direct+0x3e0/0x3e0
[  215.070886][ T5105]  ? pipe_to_sendpage+0x300/0x300
[  215.075905][ T5105]  ? security_file_permission+0x128/0x300
[  215.081635][ T5105]  do_splice_direct+0x288/0x3e0
[  215.086480][ T5105]  ? splice_direct_to_actor+0xb00/0xb00
[  215.092025][ T5105]  ? avc_policy_seqno+0x17/0x70
[  215.096883][ T5105]  ? security_file_permission+0x128/0x300
[  215.102588][ T5105]  do_sendfile+0x8e4/0x1130
[  215.107078][ T5105]  ? compat_writev+0x3d0/0x3d0
[  215.111831][ T5105]  ? vfs_write+0x427/0x4f0
[  215.116227][ T5105]  ? check_preemption_disabled+0x15a/0x330
[  215.122014][ T5105]  __x64_sys_sendfile64+0x1ce/0x230
[  215.127189][ T5105]  ? __ia32_sys_sendfile+0x250/0x250
[  215.132448][ T5105]  do_syscall_64+0xcb/0x150
[  215.137024][ T5105]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  215.142899][ T5105] RIP: 0033:0x45e219
[  215.146767][ T5105] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  215.166383][ T5105] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  215.174806][ T5105] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
[  215.182782][ T5105] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
21:38:38 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:38 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))

21:38:38 executing program 1 (fault-call:12 fault-nth:1):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  215.190735][ T5105] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
[  215.198694][ T5105] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000000
[  215.206647][ T5105] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
21:38:38 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

[  215.307607][ T5122] FAULT_INJECTION: forcing a failure.
[  215.307607][ T5122] name failslab, interval 1, probability 0, space 0, times 0
[  215.322652][ T5122] CPU: 0 PID: 5122 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  215.332709][ T5122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  215.342763][ T5122] Call Trace:
[  215.346042][ T5122]  dump_stack+0x1dd/0x24e
[  215.350386][ T5122]  ? devkmsg_release+0x11c/0x11c
[  215.355315][ T5122]  ? show_regs_print_info+0x12/0x12
[  215.360513][ T5122]  should_fail+0x6fb/0x860
[  215.364928][ T5122]  ? setup_fault_attr+0x3d0/0x3d0
[  215.369972][ T5122]  ? kcalloc+0x32/0x60
[  215.374055][ T5122]  should_failslab+0x5/0x20
[  215.378558][ T5122]  __kmalloc+0x5f/0x2d0
[  215.382707][ T5122]  ? kmem_cache_alloc_trace+0xc3/0x290
[  215.388183][ T5122]  kcalloc+0x32/0x60
[  215.392082][ T5122]  alloc_pipe_info+0x1b7/0x3a0
[  215.396838][ T5122]  splice_direct_to_actor+0x94e/0xb00
[  215.402202][ T5122]  ? refcount_sub_and_test_checked+0x1bb/0x290
[  215.408345][ T5122]  ? avc_policy_seqno+0x17/0x70
[  215.413189][ T5122]  ? do_splice_direct+0x3e0/0x3e0
[  215.418202][ T5122]  ? pipe_to_sendpage+0x300/0x300
[  215.423216][ T5122]  ? security_file_permission+0x128/0x300
[  215.428955][ T5122]  do_splice_direct+0x288/0x3e0
[  215.433804][ T5122]  ? splice_direct_to_actor+0xb00/0xb00
[  215.439346][ T5122]  ? avc_policy_seqno+0x17/0x70
[  215.444193][ T5122]  ? security_file_permission+0x128/0x300
[  215.449914][ T5122]  do_sendfile+0x8e4/0x1130
[  215.454417][ T5122]  ? compat_writev+0x3d0/0x3d0
[  215.459183][ T5122]  ? vfs_write+0x427/0x4f0
[  215.463597][ T5122]  ? check_preemption_disabled+0x15a/0x330
[  215.469399][ T5122]  __x64_sys_sendfile64+0x1ce/0x230
[  215.474597][ T5122]  ? __ia32_sys_sendfile+0x250/0x250
[  215.479882][ T5122]  do_syscall_64+0xcb/0x150
[  215.484390][ T5122]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  215.490287][ T5122] RIP: 0033:0x45e219
[  215.494187][ T5122] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  215.513789][ T5122] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  215.522196][ T5122] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
[  215.530156][ T5122] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
[  215.538122][ T5122] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
[  215.546085][ T5122] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000001
[  215.554055][ T5122] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
21:38:39 executing program 1 (fault-call:12 fault-nth:2):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:39 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:39 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

[  215.904191][ T5146] FAULT_INJECTION: forcing a failure.
[  215.904191][ T5146] name failslab, interval 1, probability 0, space 0, times 0
21:38:39 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))

[  215.955090][ T5146] CPU: 0 PID: 5146 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  215.965164][ T5146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  215.975224][ T5146] Call Trace:
[  215.978522][ T5146]  dump_stack+0x1dd/0x24e
[  215.982866][ T5146]  ? devkmsg_release+0x11c/0x11c
[  215.987810][ T5146]  ? show_regs_print_info+0x12/0x12
[  215.993010][ T5146]  ? check_preemption_disabled+0x9e/0x330
[  215.998733][ T5146]  ? __rcu_read_lock+0x50/0x50
[  216.003491][ T5146]  ? debug_smp_processor_id+0x20/0x20
[  216.008856][ T5146]  should_fail+0x6fb/0x860
[  216.013266][ T5146]  ? setup_fault_attr+0x3d0/0x3d0
[  216.018279][ T5146]  ? stack_trace_save+0x1f0/0x1f0
[  216.023296][ T5146]  ? __kernel_text_address+0x93/0x110
[  216.028688][ T5146]  ? unwind_get_return_address+0x48/0x90
[  216.034311][ T5146]  ? kvmalloc_node+0xc2/0x120
[  216.039018][ T5146]  should_failslab+0x5/0x20
[  216.043515][ T5146]  __kmalloc+0x5f/0x2d0
[  216.047665][ T5146]  kvmalloc_node+0xc2/0x120
[  216.052158][ T5146]  iov_iter_get_pages_alloc+0xbb5/0x10f0
[  216.057783][ T5146]  ? iov_iter_get_pages+0xea0/0xea0
[  216.062981][ T5146]  default_file_splice_read+0x208/0x970
[  216.068518][ T5146]  ? splice_direct_to_actor+0x94e/0xb00
[  216.074056][ T5146]  ? do_splice_direct+0x288/0x3e0
[  216.079080][ T5146]  ? do_syscall_64+0xcb/0x150
[  216.083773][ T5146]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  216.089834][ T5146]  ? __ia32_sys_tee+0xa0/0xa0
[  216.094516][ T5146]  ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0
[  216.101292][ T5146]  ? selinux_file_permission+0x2d0/0x520
[  216.106945][ T5146]  ? security_file_permission+0x1e9/0x300
[  216.112653][ T5146]  ? __ia32_sys_tee+0xa0/0xa0
[  216.117322][ T5146]  splice_direct_to_actor+0x3cf/0xb00
[  216.122690][ T5146]  ? do_splice_direct+0x3e0/0x3e0
[  216.127706][ T5146]  ? pipe_to_sendpage+0x300/0x300
[  216.132720][ T5146]  ? security_file_permission+0x128/0x300
[  216.138432][ T5146]  do_splice_direct+0x288/0x3e0
[  216.143376][ T5146]  ? splice_direct_to_actor+0xb00/0xb00
[  216.148914][ T5146]  ? avc_policy_seqno+0x17/0x70
[  216.153767][ T5146]  ? security_file_permission+0x128/0x300
[  216.159478][ T5146]  do_sendfile+0x8e4/0x1130
[  216.163975][ T5146]  ? compat_writev+0x3d0/0x3d0
[  216.168734][ T5146]  ? vfs_write+0x427/0x4f0
[  216.173148][ T5146]  ? check_preemption_disabled+0x15a/0x330
[  216.178952][ T5146]  __x64_sys_sendfile64+0x1ce/0x230
[  216.184146][ T5146]  ? __ia32_sys_sendfile+0x250/0x250
[  216.189466][ T5146]  do_syscall_64+0xcb/0x150
[  216.193962][ T5146]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  216.199846][ T5146] RIP: 0033:0x45e219
[  216.203731][ T5146] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  216.223334][ T5146] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  216.231770][ T5146] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
[  216.239742][ T5146] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
[  216.247708][ T5146] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
[  216.255672][ T5146] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000002
[  216.263639][ T5146] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
21:38:39 executing program 1 (fault-call:12 fault-nth:3):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:40 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:40 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x4, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:40 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0xe, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:40 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

[  216.593729][ T5171] FAULT_INJECTION: forcing a failure.
[  216.593729][ T5171] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  216.622790][ T5171] CPU: 0 PID: 5171 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  216.632862][ T5171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  216.642911][ T5171] Call Trace:
[  216.646202][ T5171]  dump_stack+0x1dd/0x24e
[  216.650541][ T5171]  ? devkmsg_release+0x11c/0x11c
[  216.655475][ T5171]  ? show_regs_print_info+0x12/0x12
[  216.660671][ T5171]  ? __kasan_kmalloc+0x189/0x1c0
[  216.665606][ T5171]  ? __kasan_kmalloc+0x129/0x1c0
[  216.670562][ T5171]  ? __kmalloc+0xe7/0x2d0
[  216.674883][ T5171]  ? kvmalloc_node+0xc2/0x120
[  216.679553][ T5171]  should_fail+0x6fb/0x860
[  216.683962][ T5171]  ? setup_fault_attr+0x3d0/0x3d0
[  216.688978][ T5171]  __alloc_pages_nodemask+0x1ee/0x7c0
[  216.694343][ T5171]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  216.699887][ T5171]  push_pipe+0x385/0x740
[  216.704125][ T5171]  iov_iter_get_pages_alloc+0xc2c/0x10f0
[  216.709751][ T5171]  ? iov_iter_get_pages+0xea0/0xea0
[  216.714941][ T5171]  default_file_splice_read+0x208/0x970
[  216.720477][ T5171]  ? splice_direct_to_actor+0x94e/0xb00
[  216.726018][ T5171]  ? do_splice_direct+0x288/0x3e0
[  216.731034][ T5171]  ? do_syscall_64+0xcb/0x150
[  216.735704][ T5171]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  216.741770][ T5171]  ? __ia32_sys_tee+0xa0/0xa0
[  216.746445][ T5171]  ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0
[  216.753226][ T5171]  ? selinux_file_permission+0x2d0/0x520
[  216.758850][ T5171]  ? security_file_permission+0x1e9/0x300
[  216.764583][ T5171]  ? __ia32_sys_tee+0xa0/0xa0
[  216.769249][ T5171]  splice_direct_to_actor+0x3cf/0xb00
[  216.774612][ T5171]  ? do_splice_direct+0x3e0/0x3e0
[  216.779630][ T5171]  ? pipe_to_sendpage+0x300/0x300
[  216.784653][ T5171]  ? security_file_permission+0x128/0x300
[  216.790367][ T5171]  do_splice_direct+0x288/0x3e0
[  216.795641][ T5171]  ? splice_direct_to_actor+0xb00/0xb00
[  216.801179][ T5171]  ? avc_policy_seqno+0x17/0x70
[  216.806022][ T5171]  ? security_file_permission+0x128/0x300
[  216.811734][ T5171]  do_sendfile+0x8e4/0x1130
[  216.816233][ T5171]  ? compat_writev+0x3d0/0x3d0
[  216.820985][ T5171]  ? vfs_write+0x427/0x4f0
[  216.825396][ T5171]  ? check_preemption_disabled+0x15a/0x330
[  216.831191][ T5171]  __x64_sys_sendfile64+0x1ce/0x230
[  216.836381][ T5171]  ? __ia32_sys_sendfile+0x250/0x250
[  216.841659][ T5171]  do_syscall_64+0xcb/0x150
[  216.846153][ T5171]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  216.852033][ T5171] RIP: 0033:0x45e219
[  216.855915][ T5171] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  216.875515][ T5171] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  216.883916][ T5171] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
21:38:40 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0xe00, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:40 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x2000, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  216.891875][ T5171] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
[  216.899837][ T5171] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
[  216.907883][ T5171] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000003
[  216.915847][ T5171] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
21:38:40 executing program 1 (fault-call:12 fault-nth:4):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:40 executing program 3 (fault-call:9 fault-nth:0):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:40 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))

[  217.215443][ T5211] FAULT_INJECTION: forcing a failure.
[  217.215443][ T5211] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  217.234639][ T5211] CPU: 0 PID: 5211 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  217.244730][ T5211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  217.254954][ T5211] Call Trace:
[  217.258244][ T5211]  dump_stack+0x1dd/0x24e
[  217.262595][ T5211]  ? devkmsg_release+0x11c/0x11c
[  217.267528][ T5211]  ? show_regs_print_info+0x12/0x12
[  217.272720][ T5211]  ? preempt_count_add+0x66/0x150
[  217.277742][ T5211]  ? prep_new_page+0x132/0x380
[  217.282517][ T5211]  should_fail+0x6fb/0x860
[  217.286956][ T5211]  ? setup_fault_attr+0x3d0/0x3d0
[  217.291979][ T5211]  __alloc_pages_nodemask+0x1ee/0x7c0
[  217.297370][ T5211]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  217.302922][ T5211]  push_pipe+0x385/0x740
[  217.307167][ T5211]  iov_iter_get_pages_alloc+0xc2c/0x10f0
[  217.312803][ T5211]  ? iov_iter_get_pages+0xea0/0xea0
[  217.317993][ T5211]  default_file_splice_read+0x208/0x970
[  217.323531][ T5211]  ? splice_direct_to_actor+0x94e/0xb00
[  217.329069][ T5211]  ? do_splice_direct+0x288/0x3e0
[  217.334093][ T5211]  ? do_syscall_64+0xcb/0x150
[  217.338762][ T5211]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  217.344822][ T5211]  ? __ia32_sys_tee+0xa0/0xa0
[  217.349512][ T5211]  ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0
[  217.356268][ T5211]  ? selinux_file_permission+0x2d0/0x520
[  217.361896][ T5211]  ? security_file_permission+0x1e9/0x300
[  217.367606][ T5211]  ? __ia32_sys_tee+0xa0/0xa0
[  217.372275][ T5211]  splice_direct_to_actor+0x3cf/0xb00
[  217.377643][ T5211]  ? do_splice_direct+0x3e0/0x3e0
[  217.382660][ T5211]  ? pipe_to_sendpage+0x300/0x300
[  217.387678][ T5211]  ? security_file_permission+0x128/0x300
[  217.393391][ T5211]  do_splice_direct+0x288/0x3e0
[  217.398236][ T5211]  ? splice_direct_to_actor+0xb00/0xb00
[  217.403780][ T5211]  ? avc_policy_seqno+0x17/0x70
[  217.408625][ T5211]  ? security_file_permission+0x128/0x300
[  217.414360][ T5211]  do_sendfile+0x8e4/0x1130
[  217.418858][ T5211]  ? compat_writev+0x3d0/0x3d0
[  217.423614][ T5211]  ? debug_smp_processor_id+0x20/0x20
[  217.429006][ T5211]  __x64_sys_sendfile64+0x1ce/0x230
[  217.434198][ T5211]  ? __ia32_sys_sendfile+0x250/0x250
[  217.439485][ T5211]  do_syscall_64+0xcb/0x150
[  217.443995][ T5211]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  217.449963][ T5211] RIP: 0033:0x45e219
[  217.453846][ T5211] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  217.473437][ T5211] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  217.481840][ T5211] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
[  217.489799][ T5211] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
[  217.497766][ T5211] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
[  217.505725][ T5211] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000004
[  217.513693][ T5211] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
21:38:41 executing program 1 (fault-call:12 fault-nth:5):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:41 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$key(0xf, 0x3, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

[  217.678092][ T5220] FAULT_INJECTION: forcing a failure.
[  217.678092][ T5220] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  217.699249][ T5220] CPU: 1 PID: 5220 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  217.709304][ T5220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  217.719364][ T5220] Call Trace:
[  217.722636][ T5220]  dump_stack+0x1dd/0x24e
[  217.726964][ T5220]  ? devkmsg_release+0x11c/0x11c
[  217.732001][ T5220]  ? show_regs_print_info+0x12/0x12
[  217.737192][ T5220]  ? preempt_count_add+0x66/0x150
[  217.742198][ T5220]  ? prep_new_page+0x132/0x380
[  217.746940][ T5220]  should_fail+0x6fb/0x860
[  217.751349][ T5220]  ? setup_fault_attr+0x3d0/0x3d0
[  217.756352][ T5220]  __alloc_pages_nodemask+0x1ee/0x7c0
[  217.761722][ T5220]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  217.767241][ T5220]  push_pipe+0x385/0x740
[  217.771480][ T5220]  iov_iter_get_pages_alloc+0xc2c/0x10f0
[  217.777092][ T5220]  ? iov_iter_get_pages+0xea0/0xea0
[  217.782274][ T5220]  default_file_splice_read+0x208/0x970
[  217.787791][ T5220]  ? splice_direct_to_actor+0x94e/0xb00
[  217.793322][ T5220]  ? do_splice_direct+0x288/0x3e0
[  217.798317][ T5220]  ? do_syscall_64+0xcb/0x150
[  217.802971][ T5220]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  217.809055][ T5220]  ? __ia32_sys_tee+0xa0/0xa0
[  217.813729][ T5220]  ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0
[  217.820489][ T5220]  ? selinux_file_permission+0x2d0/0x520
[  217.826130][ T5220]  ? security_file_permission+0x1e9/0x300
[  217.831830][ T5220]  ? __ia32_sys_tee+0xa0/0xa0
[  217.836482][ T5220]  splice_direct_to_actor+0x3cf/0xb00
[  217.841857][ T5220]  ? do_splice_direct+0x3e0/0x3e0
[  217.846863][ T5220]  ? pipe_to_sendpage+0x300/0x300
[  217.851863][ T5220]  ? security_file_permission+0x128/0x300
[  217.857575][ T5220]  do_splice_direct+0x288/0x3e0
[  217.862425][ T5220]  ? splice_direct_to_actor+0xb00/0xb00
[  217.867962][ T5220]  ? avc_policy_seqno+0x17/0x70
[  217.872821][ T5220]  ? security_file_permission+0x128/0x300
[  217.878569][ T5220]  do_sendfile+0x8e4/0x1130
[  217.883089][ T5220]  ? compat_writev+0x3d0/0x3d0
[  217.887860][ T5220]  ? vfs_write+0x427/0x4f0
[  217.892255][ T5220]  ? check_preemption_disabled+0x15a/0x330
[  217.898041][ T5220]  __x64_sys_sendfile64+0x1ce/0x230
[  217.903224][ T5220]  ? __ia32_sys_sendfile+0x250/0x250
[  217.908488][ T5220]  do_syscall_64+0xcb/0x150
[  217.912980][ T5220]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  217.918862][ T5220] RIP: 0033:0x45e219
[  217.922732][ T5220] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  217.942313][ T5220] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  217.950710][ T5220] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
[  217.958653][ T5220] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
[  217.966610][ T5220] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
21:38:41 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x4000, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:41 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)

21:38:41 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
dup(0xffffffffffffffff)

[  217.974555][ T5220] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005
[  217.982500][ T5220] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
21:38:41 executing program 1 (fault-call:12 fault-nth:6):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:41 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:41 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x80000, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  218.289100][ T5258] FAULT_INJECTION: forcing a failure.
[  218.289100][ T5258] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  218.306338][ T5258] CPU: 1 PID: 5258 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  218.316394][ T5258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  218.326437][ T5258] Call Trace:
[  218.329723][ T5258]  dump_stack+0x1dd/0x24e
[  218.334071][ T5258]  ? devkmsg_release+0x11c/0x11c
[  218.339002][ T5258]  ? show_regs_print_info+0x12/0x12
[  218.344187][ T5258]  ? preempt_count_add+0x66/0x150
[  218.349200][ T5258]  ? prep_new_page+0x132/0x380
[  218.353986][ T5258]  should_fail+0x6fb/0x860
[  218.358393][ T5258]  ? setup_fault_attr+0x3d0/0x3d0
[  218.363407][ T5258]  __alloc_pages_nodemask+0x1ee/0x7c0
[  218.368770][ T5258]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  218.374320][ T5258]  push_pipe+0x385/0x740
[  218.378557][ T5258]  iov_iter_get_pages_alloc+0xc2c/0x10f0
[  218.384180][ T5258]  ? iov_iter_get_pages+0xea0/0xea0
[  218.389370][ T5258]  default_file_splice_read+0x208/0x970
[  218.394901][ T5258]  ? splice_direct_to_actor+0x94e/0xb00
[  218.400433][ T5258]  ? do_splice_direct+0x288/0x3e0
[  218.405445][ T5258]  ? do_syscall_64+0xcb/0x150
[  218.410108][ T5258]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  218.416164][ T5258]  ? __ia32_sys_tee+0xa0/0xa0
[  218.420837][ T5258]  ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0
[  218.427598][ T5258]  ? selinux_file_permission+0x2d0/0x520
[  218.433218][ T5258]  ? security_file_permission+0x1e9/0x300
[  218.438942][ T5258]  ? __ia32_sys_tee+0xa0/0xa0
[  218.443610][ T5258]  splice_direct_to_actor+0x3cf/0xb00
[  218.448974][ T5258]  ? do_splice_direct+0x3e0/0x3e0
[  218.453987][ T5258]  ? pipe_to_sendpage+0x300/0x300
[  218.459003][ T5258]  ? security_file_permission+0x128/0x300
[  218.464710][ T5258]  do_splice_direct+0x288/0x3e0
[  218.469552][ T5258]  ? splice_direct_to_actor+0xb00/0xb00
[  218.475086][ T5258]  ? avc_policy_seqno+0x17/0x70
[  218.479933][ T5258]  ? security_file_permission+0x128/0x300
[  218.485632][ T5258]  do_sendfile+0x8e4/0x1130
[  218.490115][ T5258]  ? compat_writev+0x3d0/0x3d0
[  218.494863][ T5258]  ? vfs_write+0x427/0x4f0
[  218.499262][ T5258]  ? check_preemption_disabled+0x15a/0x330
[  218.505059][ T5258]  __x64_sys_sendfile64+0x1ce/0x230
[  218.510264][ T5258]  ? __ia32_sys_sendfile+0x250/0x250
[  218.515527][ T5258]  do_syscall_64+0xcb/0x150
[  218.520006][ T5258]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  218.525872][ T5258] RIP: 0033:0x45e219
[  218.529738][ T5258] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  218.549332][ T5258] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  218.557714][ T5258] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
[  218.565662][ T5258] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
[  218.573613][ T5258] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
[  218.581575][ T5258] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000006
21:38:42 executing program 1 (fault-call:12 fault-nth:7):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  218.589544][ T5258] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
21:38:42 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$key(0xf, 0x3, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

[  218.734723][ T5269] FAULT_INJECTION: forcing a failure.
[  218.734723][ T5269] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  218.749142][ T5269] CPU: 1 PID: 5269 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  218.759360][ T5269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  218.769406][ T5269] Call Trace:
[  218.772695][ T5269]  dump_stack+0x1dd/0x24e
[  218.777215][ T5269]  ? devkmsg_release+0x11c/0x11c
[  218.782168][ T5269]  ? show_regs_print_info+0x12/0x12
[  218.787371][ T5269]  ? preempt_count_add+0x66/0x150
[  218.792427][ T5269]  ? prep_new_page+0x132/0x380
[  218.797216][ T5269]  should_fail+0x6fb/0x860
[  218.801642][ T5269]  ? setup_fault_attr+0x3d0/0x3d0
[  218.806657][ T5269]  __alloc_pages_nodemask+0x1ee/0x7c0
[  218.812028][ T5269]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  218.817581][ T5269]  push_pipe+0x385/0x740
[  218.821831][ T5269]  iov_iter_get_pages_alloc+0xc2c/0x10f0
[  218.827452][ T5269]  ? iov_iter_get_pages+0xea0/0xea0
[  218.832627][ T5269]  default_file_splice_read+0x208/0x970
[  218.838167][ T5269]  ? splice_direct_to_actor+0x94e/0xb00
[  218.843690][ T5269]  ? do_splice_direct+0x288/0x3e0
[  218.848685][ T5269]  ? do_syscall_64+0xcb/0x150
[  218.853348][ T5269]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  218.859393][ T5269]  ? __ia32_sys_tee+0xa0/0xa0
[  218.864065][ T5269]  ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0
[  218.870836][ T5269]  ? selinux_file_permission+0x2d0/0x520
[  218.876468][ T5269]  ? security_file_permission+0x1e9/0x300
21:38:42 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
dup(0xffffffffffffffff)

21:38:42 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x4, 0x2e0)

[  218.882179][ T5269]  ? __ia32_sys_tee+0xa0/0xa0
[  218.886872][ T5269]  splice_direct_to_actor+0x3cf/0xb00
[  218.892255][ T5269]  ? do_splice_direct+0x3e0/0x3e0
[  218.897270][ T5269]  ? pipe_to_sendpage+0x300/0x300
[  218.902305][ T5269]  ? security_file_permission+0x128/0x300
[  218.908013][ T5269]  do_splice_direct+0x288/0x3e0
[  218.912852][ T5269]  ? splice_direct_to_actor+0xb00/0xb00
[  218.918367][ T5269]  ? avc_policy_seqno+0x17/0x70
[  218.923188][ T5269]  ? security_file_permission+0x128/0x300
[  218.928880][ T5269]  do_sendfile+0x8e4/0x1130
[  218.933369][ T5269]  ? compat_writev+0x3d0/0x3d0
[  218.938132][ T5269]  ? vfs_write+0x427/0x4f0
[  218.942541][ T5269]  ? check_preemption_disabled+0x15a/0x330
[  218.948338][ T5269]  __x64_sys_sendfile64+0x1ce/0x230
[  218.953546][ T5269]  ? __ia32_sys_sendfile+0x250/0x250
[  218.958825][ T5269]  do_syscall_64+0xcb/0x150
[  218.963342][ T5269]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  218.969221][ T5269] RIP: 0033:0x45e219
[  218.973098][ T5269] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  218.992679][ T5269] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  219.001066][ T5269] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
[  219.009037][ T5269] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
[  219.016985][ T5269] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
[  219.024965][ T5269] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000007
21:38:42 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x80040, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  219.032929][ T5269] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
21:38:42 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x200000, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:42 executing program 1 (fault-call:12 fault-nth:8):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:42 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x8, 0x2e0)

21:38:42 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))

21:38:42 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x1000000, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:42 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x4000000, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:42 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0xe, 0x2e0)

21:38:42 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0xe00, 0x2e0)

[  219.394623][ T5334] FAULT_INJECTION: forcing a failure.
[  219.394623][ T5334] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  219.410972][ T5334] CPU: 0 PID: 5334 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  219.421035][ T5334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  219.431083][ T5334] Call Trace:
[  219.434379][ T5334]  dump_stack+0x1dd/0x24e
[  219.438746][ T5334]  ? devkmsg_release+0x11c/0x11c
[  219.443710][ T5334]  ? show_regs_print_info+0x12/0x12
[  219.448900][ T5334]  ? preempt_count_add+0x66/0x150
[  219.453915][ T5334]  ? prep_new_page+0x132/0x380
[  219.458679][ T5334]  should_fail+0x6fb/0x860
[  219.463105][ T5334]  ? setup_fault_attr+0x3d0/0x3d0
[  219.468148][ T5334]  __alloc_pages_nodemask+0x1ee/0x7c0
[  219.473523][ T5334]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  219.479043][ T5334]  push_pipe+0x385/0x740
[  219.483256][ T5334]  iov_iter_get_pages_alloc+0xc2c/0x10f0
[  219.488876][ T5334]  ? iov_iter_get_pages+0xea0/0xea0
[  219.494048][ T5334]  default_file_splice_read+0x208/0x970
[  219.499568][ T5334]  ? splice_direct_to_actor+0x94e/0xb00
[  219.505137][ T5334]  ? do_splice_direct+0x288/0x3e0
[  219.510136][ T5334]  ? do_syscall_64+0xcb/0x150
[  219.514791][ T5334]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  219.520876][ T5334]  ? __ia32_sys_tee+0xa0/0xa0
[  219.525531][ T5334]  ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0
[  219.532264][ T5334]  ? selinux_file_permission+0x2d0/0x520
[  219.537868][ T5334]  ? security_file_permission+0x1e9/0x300
[  219.543558][ T5334]  ? __ia32_sys_tee+0xa0/0xa0
[  219.548256][ T5334]  splice_direct_to_actor+0x3cf/0xb00
[  219.553604][ T5334]  ? do_splice_direct+0x3e0/0x3e0
[  219.558602][ T5334]  ? pipe_to_sendpage+0x300/0x300
[  219.563610][ T5334]  ? security_file_permission+0x128/0x300
[  219.569299][ T5334]  do_splice_direct+0x288/0x3e0
[  219.574120][ T5334]  ? splice_direct_to_actor+0xb00/0xb00
[  219.579633][ T5334]  ? avc_policy_seqno+0x17/0x70
[  219.584477][ T5334]  ? security_file_permission+0x128/0x300
[  219.590187][ T5334]  do_sendfile+0x8e4/0x1130
[  219.594709][ T5334]  ? compat_writev+0x3d0/0x3d0
[  219.600448][ T5334]  ? debug_smp_processor_id+0x20/0x20
[  219.605842][ T5334]  ? __schedule+0xae9/0x1080
[  219.610403][ T5334]  __x64_sys_sendfile64+0x1ce/0x230
[  219.615575][ T5334]  ? __ia32_sys_sendfile+0x250/0x250
[  219.620841][ T5334]  do_syscall_64+0xcb/0x150
[  219.625318][ T5334]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  219.631180][ T5334] RIP: 0033:0x45e219
[  219.635062][ T5334] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  219.654645][ T5334] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  219.663027][ T5334] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
[  219.670987][ T5334] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
[  219.678930][ T5334] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
[  219.686879][ T5334] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000008
[  219.694837][ T5334] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
21:38:43 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0xe000000, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:43 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
dup(0xffffffffffffffff)

21:38:43 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$key(0xf, 0x3, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r4, 0x4, 0x46000)
lseek(r4, 0x4200, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}])
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8400fffffffb)
sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e)

21:38:43 executing program 1 (fault-call:12 fault-nth:9):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:43 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x40000000, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:43 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x40000800, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:43 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0xfeffffff, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  219.871972][ T5361] FAULT_INJECTION: forcing a failure.
[  219.871972][ T5361] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  219.885329][ T5361] CPU: 0 PID: 5361 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  219.895387][ T5361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  219.905431][ T5361] Call Trace:
[  219.908722][ T5361]  dump_stack+0x1dd/0x24e
[  219.913044][ T5361]  ? devkmsg_release+0x11c/0x11c
[  219.917975][ T5361]  ? show_regs_print_info+0x12/0x12
[  219.923163][ T5361]  ? preempt_count_add+0x66/0x150
[  219.928179][ T5361]  ? prep_new_page+0x132/0x380
[  219.932931][ T5361]  should_fail+0x6fb/0x860
[  219.937329][ T5361]  ? setup_fault_attr+0x3d0/0x3d0
[  219.942357][ T5361]  __alloc_pages_nodemask+0x1ee/0x7c0
[  219.947788][ T5361]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  219.953333][ T5361]  push_pipe+0x385/0x740
[  219.957597][ T5361]  iov_iter_get_pages_alloc+0xc2c/0x10f0
[  219.963214][ T5361]  ? iov_iter_get_pages+0xea0/0xea0
[  219.968389][ T5361]  default_file_splice_read+0x208/0x970
[  219.973933][ T5361]  ? splice_direct_to_actor+0x94e/0xb00
[  219.979469][ T5361]  ? do_splice_direct+0x288/0x3e0
[  219.984508][ T5361]  ? do_syscall_64+0xcb/0x150
[  219.989172][ T5361]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  219.995214][ T5361]  ? __ia32_sys_tee+0xa0/0xa0
[  219.999884][ T5361]  ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0
[  220.006639][ T5361]  ? selinux_file_permission+0x2d0/0x520
[  220.012268][ T5361]  ? security_file_permission+0x1e9/0x300
[  220.017975][ T5361]  ? __ia32_sys_tee+0xa0/0xa0
[  220.022650][ T5361]  splice_direct_to_actor+0x3cf/0xb00
[  220.028011][ T5361]  ? do_splice_direct+0x3e0/0x3e0
[  220.033049][ T5361]  ? pipe_to_sendpage+0x300/0x300
[  220.038086][ T5361]  ? security_file_permission+0x128/0x300
[  220.043789][ T5361]  do_splice_direct+0x288/0x3e0
[  220.048616][ T5361]  ? splice_direct_to_actor+0xb00/0xb00
[  220.054143][ T5361]  ? avc_policy_seqno+0x17/0x70
[  220.058981][ T5361]  ? security_file_permission+0x128/0x300
[  220.064684][ T5361]  do_sendfile+0x8e4/0x1130
[  220.069182][ T5361]  ? compat_writev+0x3d0/0x3d0
[  220.073961][ T5361]  ? vfs_write+0x427/0x4f0
[  220.078362][ T5361]  ? check_preemption_disabled+0x15a/0x330
[  220.084306][ T5361]  __x64_sys_sendfile64+0x1ce/0x230
[  220.089591][ T5361]  ? __ia32_sys_sendfile+0x250/0x250
[  220.094881][ T5361]  do_syscall_64+0xcb/0x150
[  220.099375][ T5361]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  220.105255][ T5361] RIP: 0033:0x45e219
[  220.109138][ T5361] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  220.128746][ T5361] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  220.137142][ T5361] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
[  220.145119][ T5361] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
[  220.153062][ T5361] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
[  220.161017][ T5361] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000009
21:38:43 executing program 4 (fault-call:3 fault-nth:0):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  220.168984][ T5361] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
21:38:43 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0xfffffffe, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:43 executing program 1 (fault-call:12 fault-nth:10):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  220.200303][ T5385] FAULT_INJECTION: forcing a failure.
[  220.200303][ T5385] name failslab, interval 1, probability 0, space 0, times 0
[  220.213432][ T5385] CPU: 0 PID: 5385 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  220.223490][ T5385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  220.233536][ T5385] Call Trace:
[  220.236821][ T5385]  dump_stack+0x1dd/0x24e
[  220.241155][ T5385]  ? devkmsg_release+0x11c/0x11c
21:38:43 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x2000, 0x2e0)

[  220.246086][ T5385]  ? show_regs_print_info+0x12/0x12
[  220.251295][ T5385]  ? check_preemption_disabled+0x9e/0x330
[  220.257010][ T5385]  ? debug_smp_processor_id+0x20/0x20
[  220.262373][ T5385]  should_fail+0x6fb/0x860
[  220.266785][ T5385]  ? setup_fault_attr+0x3d0/0x3d0
[  220.271800][ T5385]  ? __sb_end_write+0xb5/0x100
[  220.276556][ T5385]  ? vfs_write+0x427/0x4f0
[  220.280965][ T5385]  ? ksys_mount+0x30/0xf0
[  220.285289][ T5385]  should_failslab+0x5/0x20
[  220.289786][ T5385]  __kmalloc_track_caller+0x5d/0x2c0
[  220.295063][ T5385]  ? strnlen_user+0x185/0x210
[  220.299721][ T5385]  strndup_user+0x73/0x150
[  220.304126][ T5385]  ksys_mount+0x30/0xf0
[  220.308268][ T5385]  __x64_sys_mount+0xb1/0xc0
[  220.312877][ T5385]  do_syscall_64+0xcb/0x150
[  220.317355][ T5385]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  220.323233][ T5385] RIP: 0033:0x45e219
21:38:44 executing program 4 (fault-call:3 fault-nth:1):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  220.327115][ T5385] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  220.352873][ T5385] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  220.361287][ T5385] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  220.369290][ T5385] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  220.377248][ T5385] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  220.385196][ T5385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.393156][ T5385] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
21:38:44 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x80000000000, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  220.457465][ T5400] FAULT_INJECTION: forcing a failure.
[  220.457465][ T5400] name failslab, interval 1, probability 0, space 0, times 0
[  220.493033][ T5400] CPU: 0 PID: 5400 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  220.493842][ T5410] FAULT_INJECTION: forcing a failure.
[  220.493842][ T5410] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  220.503120][ T5400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  220.503124][ T5400] Call Trace:
[  220.503144][ T5400]  dump_stack+0x1dd/0x24e
[  220.503155][ T5400]  ? devkmsg_release+0x11c/0x11c
[  220.503167][ T5400]  ? show_regs_print_info+0x12/0x12
[  220.503182][ T5400]  should_fail+0x6fb/0x860
[  220.503194][ T5400]  ? setup_fault_attr+0x3d0/0x3d0
[  220.503207][ T5400]  ? copy_mount_options+0x59/0x320
[  220.503217][ T5400]  should_failslab+0x5/0x20
[  220.503229][ T5400]  kmem_cache_alloc_trace+0x39/0x290
[  220.503241][ T5400]  copy_mount_options+0x59/0x320
[  220.503251][ T5400]  ? ksys_mount+0x86/0xf0
[  220.503260][ T5400]  ksys_mount+0x97/0xf0
[  220.503276][ T5400]  __x64_sys_mount+0xb1/0xc0
[  220.586395][ T5400]  do_syscall_64+0xcb/0x150
[  220.590884][ T5400]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  220.596759][ T5400] RIP: 0033:0x45e219
[  220.600726][ T5400] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  220.620408][ T5400] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  220.628808][ T5400] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  220.636768][ T5400] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  220.644730][ T5400] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  220.652688][ T5400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  220.660644][ T5400] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  220.668611][ T5410] CPU: 1 PID: 5410 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  220.678662][ T5410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  220.688720][ T5410] Call Trace:
[  220.692010][ T5410]  dump_stack+0x1dd/0x24e
[  220.696339][ T5410]  ? devkmsg_release+0x11c/0x11c
[  220.701281][ T5410]  ? show_regs_print_info+0x12/0x12
[  220.706454][ T5410]  ? preempt_count_add+0x66/0x150
[  220.711455][ T5410]  ? prep_new_page+0x132/0x380
[  220.716207][ T5410]  should_fail+0x6fb/0x860
[  220.720597][ T5410]  ? setup_fault_attr+0x3d0/0x3d0
[  220.725607][ T5410]  __alloc_pages_nodemask+0x1ee/0x7c0
[  220.730963][ T5410]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  220.736493][ T5410]  push_pipe+0x385/0x740
[  220.740715][ T5410]  iov_iter_get_pages_alloc+0xc2c/0x10f0
[  220.746328][ T5410]  ? iov_iter_get_pages+0xea0/0xea0
[  220.751511][ T5410]  default_file_splice_read+0x208/0x970
[  220.757036][ T5410]  ? splice_direct_to_actor+0x94e/0xb00
[  220.762550][ T5410]  ? do_splice_direct+0x288/0x3e0
[  220.767543][ T5410]  ? do_syscall_64+0xcb/0x150
[  220.772204][ T5410]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  220.778259][ T5410]  ? __ia32_sys_tee+0xa0/0xa0
[  220.782919][ T5410]  ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0
[  220.789669][ T5410]  ? selinux_file_permission+0x2d0/0x520
[  220.795306][ T5410]  ? security_file_permission+0x1e9/0x300
[  220.800994][ T5410]  ? __ia32_sys_tee+0xa0/0xa0
[  220.805655][ T5410]  splice_direct_to_actor+0x3cf/0xb00
[  220.811011][ T5410]  ? do_splice_direct+0x3e0/0x3e0
[  220.816005][ T5410]  ? pipe_to_sendpage+0x300/0x300
[  220.821015][ T5410]  ? security_file_permission+0x128/0x300
[  220.826727][ T5410]  do_splice_direct+0x288/0x3e0
[  220.831593][ T5410]  ? splice_direct_to_actor+0xb00/0xb00
[  220.837370][ T5410]  ? avc_policy_seqno+0x17/0x70
[  220.842195][ T5410]  ? security_file_permission+0x128/0x300
[  220.847884][ T5410]  do_sendfile+0x8e4/0x1130
[  220.852361][ T5410]  ? compat_writev+0x3d0/0x3d0
[  220.857094][ T5410]  ? vfs_write+0x427/0x4f0
[  220.861510][ T5410]  ? check_preemption_disabled+0x15a/0x330
[  220.867318][ T5410]  __x64_sys_sendfile64+0x1ce/0x230
[  220.872488][ T5410]  ? __ia32_sys_sendfile+0x250/0x250
[  220.877746][ T5410]  do_syscall_64+0xcb/0x150
[  220.882228][ T5410]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  220.888114][ T5410] RIP: 0033:0x45e219
[  220.891981][ T5410] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  220.911601][ T5410] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  220.919984][ T5410] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
[  220.927933][ T5410] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
[  220.935887][ T5410] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
[  220.943840][ T5410] R10: 0800000080004103 R11: 0000000000000246 R12: 000000000000000a
[  220.951782][ T5410] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
21:38:44 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)

21:38:44 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:44 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x4000, 0x2e0)

21:38:44 executing program 4 (fault-call:3 fault-nth:2):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:44 executing program 1 (fault-call:12 fault-nth:11):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:44 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)

[  221.042946][ T5425] FAULT_INJECTION: forcing a failure.
[  221.042946][ T5425] name failslab, interval 1, probability 0, space 0, times 0
[  221.064936][ T5425] CPU: 1 PID: 5425 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  221.074997][ T5425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  221.085039][ T5425] Call Trace:
[  221.088345][ T5425]  dump_stack+0x1dd/0x24e
21:38:44 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x80000, 0x2e0)

[  221.092668][ T5425]  ? devkmsg_release+0x11c/0x11c
[  221.097594][ T5425]  ? show_regs_print_info+0x12/0x12
[  221.102785][ T5425]  should_fail+0x6fb/0x860
[  221.107265][ T5425]  ? setup_fault_attr+0x3d0/0x3d0
[  221.112270][ T5425]  ? getname_flags+0xb8/0x610
[  221.116934][ T5425]  should_failslab+0x5/0x20
[  221.121427][ T5425]  kmem_cache_alloc+0x36/0x270
[  221.126169][ T5425]  getname_flags+0xb8/0x610
[  221.130648][ T5425]  user_path_at_empty+0x28/0x50
[  221.135470][ T5425]  do_mount+0x167/0x2660
[  221.139689][ T5425]  ? copy_mount_string+0x30/0x30
[  221.144598][ T5425]  ? page_fault+0x2f/0x40
[  221.148939][ T5425]  ? copy_mount_options+0x1e8/0x320
[  221.154119][ T5425]  ? copy_mount_options+0x293/0x320
[  221.159563][ T5425]  ksys_mount+0xc2/0xf0
[  221.163749][ T5425]  __x64_sys_mount+0xb1/0xc0
[  221.168318][ T5425]  do_syscall_64+0xcb/0x150
[  221.172794][ T5425]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  221.178676][ T5425] RIP: 0033:0x45e219
[  221.182551][ T5425] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  221.202126][ T5425] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  221.210504][ T5425] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  221.218457][ T5425] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  221.226401][ T5425] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  221.234361][ T5425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
21:38:44 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)

21:38:44 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x200000000000, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  221.242308][ T5425] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
21:38:44 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)

21:38:44 executing program 4 (fault-call:3 fault-nth:3):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  221.318831][ T5447] FAULT_INJECTION: forcing a failure.
[  221.318831][ T5447] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  221.352493][ T5447] CPU: 1 PID: 5447 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  221.362577][ T5447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  221.372624][ T5447] Call Trace:
[  221.375913][ T5447]  dump_stack+0x1dd/0x24e
[  221.380241][ T5447]  ? devkmsg_release+0x11c/0x11c
[  221.385179][ T5447]  ? show_regs_print_info+0x12/0x12
[  221.390372][ T5447]  ? preempt_count_add+0x66/0x150
[  221.395386][ T5447]  ? prep_new_page+0x132/0x380
[  221.400169][ T5447]  should_fail+0x6fb/0x860
[  221.404591][ T5447]  ? setup_fault_attr+0x3d0/0x3d0
[  221.409634][ T5447]  __alloc_pages_nodemask+0x1ee/0x7c0
[  221.415005][ T5447]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  221.420549][ T5447]  push_pipe+0x385/0x740
[  221.424784][ T5447]  iov_iter_get_pages_alloc+0xc2c/0x10f0
[  221.430438][ T5447]  ? iov_iter_get_pages+0xea0/0xea0
[  221.435634][ T5447]  default_file_splice_read+0x208/0x970
[  221.441195][ T5447]  ? splice_direct_to_actor+0x94e/0xb00
[  221.446733][ T5447]  ? do_splice_direct+0x288/0x3e0
[  221.451775][ T5447]  ? do_syscall_64+0xcb/0x150
[  221.456446][ T5447]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  221.462506][ T5447]  ? __ia32_sys_tee+0xa0/0xa0
[  221.467186][ T5447]  ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0
[  221.473939][ T5447]  ? selinux_file_permission+0x2d0/0x520
[  221.479561][ T5447]  ? security_file_permission+0x1e9/0x300
[  221.485266][ T5447]  ? __ia32_sys_tee+0xa0/0xa0
[  221.489935][ T5447]  splice_direct_to_actor+0x3cf/0xb00
[  221.495302][ T5447]  ? do_splice_direct+0x3e0/0x3e0
[  221.500313][ T5447]  ? pipe_to_sendpage+0x300/0x300
[  221.505328][ T5447]  ? security_file_permission+0x128/0x300
[  221.511041][ T5447]  do_splice_direct+0x288/0x3e0
[  221.515890][ T5447]  ? splice_direct_to_actor+0xb00/0xb00
[  221.519388][ T5456] FAULT_INJECTION: forcing a failure.
[  221.519388][ T5456] name failslab, interval 1, probability 0, space 0, times 0
[  221.521428][ T5447]  ? avc_policy_seqno+0x17/0x70
[  221.538814][ T5447]  ? security_file_permission+0x128/0x300
[  221.544522][ T5447]  do_sendfile+0x8e4/0x1130
[  221.549020][ T5447]  ? compat_writev+0x3d0/0x3d0
[  221.553798][ T5447]  ? debug_smp_processor_id+0x20/0x20
[  221.559153][ T5447]  ? __schedule+0xae9/0x1080
[  221.563752][ T5447]  __x64_sys_sendfile64+0x1ce/0x230
[  221.569200][ T5447]  ? __ia32_sys_sendfile+0x250/0x250
[  221.574472][ T5447]  do_syscall_64+0xcb/0x150
[  221.578982][ T5447]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  221.584855][ T5447] RIP: 0033:0x45e219
[  221.588731][ T5447] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  221.608314][ T5447] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  221.616706][ T5447] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
[  221.624665][ T5447] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
[  221.632619][ T5447] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
[  221.640589][ T5447] R10: 0800000080004103 R11: 0000000000000246 R12: 000000000000000b
[  221.648556][ T5447] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
[  221.656522][ T5456] CPU: 0 PID: 5456 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  221.666583][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  221.676632][ T5456] Call Trace:
[  221.676649][ T5456]  dump_stack+0x1dd/0x24e
[  221.676660][ T5456]  ? devkmsg_release+0x11c/0x11c
[  221.676670][ T5456]  ? show_regs_print_info+0x12/0x12
[  221.676682][ T5456]  should_fail+0x6fb/0x860
[  221.676692][ T5456]  ? setup_fault_attr+0x3d0/0x3d0
[  221.676704][ T5456]  ? alloc_fs_context+0x61/0x650
[  221.676713][ T5456]  should_failslab+0x5/0x20
[  221.676724][ T5456]  kmem_cache_alloc_trace+0x39/0x290
[  221.676734][ T5456]  alloc_fs_context+0x61/0x650
[  221.676750][ T5456]  ? _raw_read_unlock+0x21/0x40
[  221.728257][ T5456]  ? get_fs_type+0x410/0x490
[  221.728267][ T5456]  do_mount+0x12d1/0x2660
[  221.728283][ T5456]  ? copy_mount_string+0x30/0x30
[  221.742086][ T5456]  ? page_fault+0x2f/0x40
[  221.742099][ T5456]  ? copy_mount_options+0x1e8/0x320
[  221.742108][ T5456]  ? copy_mount_options+0x293/0x320
[  221.742122][ T5456]  ksys_mount+0xc2/0xf0
[  221.760898][ T5456]  __x64_sys_mount+0xb1/0xc0
[  221.760910][ T5456]  do_syscall_64+0xcb/0x150
[  221.760920][ T5456]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  221.760928][ T5456] RIP: 0033:0x45e219
[  221.760937][ T5456] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  221.760941][ T5456] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  221.760949][ T5456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
21:38:45 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x80040, 0x2e0)

21:38:45 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)

[  221.760961][ T5456] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  221.823603][ T5456] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  221.823608][ T5456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  221.823613][ T5456] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
21:38:45 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:45 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x200000, 0x2e0)

21:38:45 executing program 1 (fault-call:12 fault-nth:12):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:45 executing program 4 (fault-call:3 fault-nth:4):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:45 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)

21:38:45 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
listen(0xffffffffffffffff, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)

[  221.975456][ T5491] FAULT_INJECTION: forcing a failure.
[  221.975456][ T5491] name failslab, interval 1, probability 0, space 0, times 0
[  221.990529][ T5490] FAULT_INJECTION: forcing a failure.
[  221.990529][ T5490] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  221.994877][ T5491] CPU: 1 PID: 5491 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  222.013796][ T5491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  222.023840][ T5491] Call Trace:
[  222.027122][ T5491]  dump_stack+0x1dd/0x24e
[  222.031442][ T5491]  ? devkmsg_release+0x11c/0x11c
[  222.036380][ T5491]  ? show_regs_print_info+0x12/0x12
[  222.041564][ T5491]  should_fail+0x6fb/0x860
[  222.045967][ T5491]  ? setup_fault_attr+0x3d0/0x3d0
[  222.050978][ T5491]  ? alloc_fs_context+0x61/0x650
[  222.055899][ T5491]  should_failslab+0x5/0x20
[  222.060386][ T5491]  kmem_cache_alloc_trace+0x39/0x290
[  222.065676][ T5491]  alloc_fs_context+0x61/0x650
[  222.070443][ T5491]  ? _raw_read_unlock+0x21/0x40
[  222.075294][ T5491]  ? get_fs_type+0x410/0x490
[  222.079867][ T5491]  do_mount+0x12d1/0x2660
[  222.084186][ T5491]  ? copy_mount_string+0x30/0x30
[  222.089137][ T5491]  ? page_fault+0x2f/0x40
[  222.093453][ T5491]  ? copy_mount_options+0x1e8/0x320
[  222.098657][ T5491]  ? copy_mount_options+0x293/0x320
[  222.103925][ T5491]  ksys_mount+0xc2/0xf0
[  222.108085][ T5491]  __x64_sys_mount+0xb1/0xc0
[  222.112679][ T5491]  do_syscall_64+0xcb/0x150
[  222.117173][ T5491]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  222.123047][ T5491] RIP: 0033:0x45e219
[  222.126926][ T5491] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  222.150159][ T5491] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  222.158555][ T5491] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  222.166513][ T5491] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  222.174470][ T5491] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  222.182420][ T5491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  222.190374][ T5491] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  222.198343][ T5490] CPU: 0 PID: 5490 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  222.208389][ T5490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  222.218420][ T5490] Call Trace:
[  222.221703][ T5490]  dump_stack+0x1dd/0x24e
21:38:45 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
listen(0xffffffffffffffff, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)

[  222.226022][ T5490]  ? devkmsg_release+0x11c/0x11c
[  222.230950][ T5490]  ? show_regs_print_info+0x12/0x12
[  222.236142][ T5490]  ? preempt_count_add+0x66/0x150
[  222.241160][ T5490]  ? prep_new_page+0x132/0x380
[  222.245909][ T5490]  should_fail+0x6fb/0x860
[  222.250299][ T5490]  ? setup_fault_attr+0x3d0/0x3d0
[  222.255295][ T5490]  __alloc_pages_nodemask+0x1ee/0x7c0
[  222.260641][ T5490]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  222.266160][ T5490]  push_pipe+0x385/0x740
[  222.270391][ T5490]  iov_iter_get_pages_alloc+0xc2c/0x10f0
[  222.276015][ T5490]  ? iov_iter_get_pages+0xea0/0xea0
[  222.281199][ T5490]  default_file_splice_read+0x208/0x970
[  222.286756][ T5490]  ? splice_direct_to_actor+0x94e/0xb00
[  222.292279][ T5490]  ? do_splice_direct+0x288/0x3e0
[  222.297278][ T5490]  ? do_syscall_64+0xcb/0x150
[  222.302361][ T5490]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  222.308410][ T5490]  ? __ia32_sys_tee+0xa0/0xa0
[  222.313065][ T5490]  ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0
[  222.319802][ T5490]  ? selinux_file_permission+0x2d0/0x520
[  222.325407][ T5490]  ? security_file_permission+0x1e9/0x300
[  222.331115][ T5490]  ? __ia32_sys_tee+0xa0/0xa0
[  222.335771][ T5490]  splice_direct_to_actor+0x3cf/0xb00
[  222.341128][ T5490]  ? do_splice_direct+0x3e0/0x3e0
[  222.346135][ T5490]  ? pipe_to_sendpage+0x300/0x300
[  222.351145][ T5490]  ? security_file_permission+0x128/0x300
[  222.356834][ T5490]  do_splice_direct+0x288/0x3e0
[  222.361662][ T5490]  ? splice_direct_to_actor+0xb00/0xb00
[  222.367182][ T5490]  ? avc_policy_seqno+0x17/0x70
[  222.372006][ T5490]  ? security_file_permission+0x128/0x300
[  222.377694][ T5490]  do_sendfile+0x8e4/0x1130
[  222.382170][ T5490]  ? compat_writev+0x3d0/0x3d0
[  222.386911][ T5490]  ? vfs_write+0x427/0x4f0
[  222.391331][ T5490]  ? check_preemption_disabled+0x15a/0x330
[  222.397120][ T5490]  __x64_sys_sendfile64+0x1ce/0x230
[  222.402287][ T5490]  ? __ia32_sys_sendfile+0x250/0x250
[  222.407548][ T5490]  do_syscall_64+0xcb/0x150
[  222.412043][ T5490]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  222.417929][ T5490] RIP: 0033:0x45e219
[  222.421806][ T5490] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  222.441392][ T5490] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  222.449772][ T5490] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
[  222.457711][ T5490] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
[  222.465666][ T5490] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
21:38:46 executing program 4 (fault-call:3 fault-nth:5):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:46 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x1000000000000, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:46 executing program 1 (fault-call:12 fault-nth:13):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:46 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
listen(0xffffffffffffffff, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)

[  222.473607][ T5490] R10: 0800000080004103 R11: 0000000000000246 R12: 000000000000000c
[  222.481566][ T5490] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
21:38:46 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)

[  222.534521][ T5512] FAULT_INJECTION: forcing a failure.
[  222.534521][ T5512] name failslab, interval 1, probability 0, space 0, times 0
[  222.553290][ T5512] CPU: 1 PID: 5512 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  222.563373][ T5512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  222.573416][ T5512] Call Trace:
[  222.576690][ T5512]  dump_stack+0x1dd/0x24e
[  222.581003][ T5512]  ? devkmsg_release+0x11c/0x11c
[  222.585942][ T5512]  ? avc_has_perm_noaudit+0x30c/0x400
[  222.591306][ T5512]  ? show_regs_print_info+0x12/0x12
[  222.596482][ T5512]  ? avc_denied+0x1c0/0x1c0
[  222.600962][ T5512]  should_fail+0x6fb/0x860
[  222.605359][ T5512]  ? setup_fault_attr+0x3d0/0x3d0
[  222.610360][ T5512]  ? cred_has_capability+0x1b1/0x410
[  222.615620][ T5512]  ? cred_has_capability+0x2c3/0x410
[  222.620883][ T5512]  ? v9fs_mount+0x5c/0x790
[  222.625276][ T5512]  should_failslab+0x5/0x20
[  222.629761][ T5512]  kmem_cache_alloc_trace+0x39/0x290
[  222.635029][ T5512]  ? legacy_init_fs_context+0x4d/0xc0
[  222.640379][ T5512]  v9fs_mount+0x5c/0x790
[  222.644600][ T5512]  ? cap_capable+0x23f/0x280
[  222.649168][ T5512]  legacy_get_tree+0xde/0x170
[  222.653821][ T5512]  ? iterate_incfs_dir+0x370/0x370
[  222.659084][ T5512]  vfs_get_tree+0x85/0x260
[  222.663479][ T5512]  do_mount+0x18ab/0x2660
[  222.667791][ T5512]  ? copy_mount_string+0x30/0x30
[  222.672720][ T5512]  ? page_fault+0x2f/0x40
[  222.677034][ T5512]  ? copy_mount_options+0x1e8/0x320
[  222.682207][ T5512]  ? copy_mount_options+0x293/0x320
[  222.687383][ T5512]  ksys_mount+0xc2/0xf0
[  222.691519][ T5512]  __x64_sys_mount+0xb1/0xc0
[  222.696101][ T5512]  do_syscall_64+0xcb/0x150
[  222.700604][ T5512]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  222.706471][ T5512] RIP: 0033:0x45e219
[  222.710346][ T5512] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  222.729933][ T5512] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  222.738321][ T5512] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  222.746268][ T5512] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  222.754215][ T5512] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  222.762163][ T5512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  222.770112][ T5512] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
21:38:46 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:46 executing program 4 (fault-call:3 fault-nth:6):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:46 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x1000000, 0x2e0)

[  222.830641][ T5533] FAULT_INJECTION: forcing a failure.
[  222.830641][ T5533] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  222.844187][ T5533] CPU: 0 PID: 5533 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  222.854263][ T5533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  222.864308][ T5533] Call Trace:
[  222.867593][ T5533]  dump_stack+0x1dd/0x24e
[  222.871914][ T5533]  ? devkmsg_release+0x11c/0x11c
[  222.876845][ T5533]  ? show_regs_print_info+0x12/0x12
[  222.882034][ T5533]  ? preempt_count_add+0x66/0x150
[  222.887052][ T5533]  ? prep_new_page+0x132/0x380
[  222.891805][ T5533]  should_fail+0x6fb/0x860
[  222.895859][ T5539] FAULT_INJECTION: forcing a failure.
[  222.895859][ T5539] name failslab, interval 1, probability 0, space 0, times 0
[  222.896211][ T5533]  ? setup_fault_attr+0x3d0/0x3d0
[  222.913787][ T5533]  __alloc_pages_nodemask+0x1ee/0x7c0
[  222.919145][ T5533]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  222.924713][ T5533]  push_pipe+0x385/0x740
[  222.928941][ T5533]  iov_iter_get_pages_alloc+0xc2c/0x10f0
[  222.934558][ T5533]  ? iov_iter_get_pages+0xea0/0xea0
[  222.939738][ T5533]  default_file_splice_read+0x208/0x970
[  222.945272][ T5533]  ? splice_direct_to_actor+0x94e/0xb00
[  222.950803][ T5533]  ? do_splice_direct+0x288/0x3e0
[  222.955809][ T5533]  ? do_syscall_64+0xcb/0x150
[  222.960468][ T5533]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  222.966516][ T5533]  ? __ia32_sys_tee+0xa0/0xa0
[  222.971202][ T5533]  ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0
[  222.977967][ T5533]  ? selinux_file_permission+0x2d0/0x520
[  222.983584][ T5533]  ? security_file_permission+0x1e9/0x300
[  222.989282][ T5533]  ? __ia32_sys_tee+0xa0/0xa0
[  222.993941][ T5533]  splice_direct_to_actor+0x3cf/0xb00
[  222.999320][ T5533]  ? do_splice_direct+0x3e0/0x3e0
[  223.004325][ T5533]  ? pipe_to_sendpage+0x300/0x300
[  223.009331][ T5533]  ? security_file_permission+0x128/0x300
[  223.015031][ T5533]  do_splice_direct+0x288/0x3e0
[  223.019867][ T5533]  ? splice_direct_to_actor+0xb00/0xb00
[  223.025399][ T5533]  ? avc_policy_seqno+0x17/0x70
[  223.030248][ T5533]  ? security_file_permission+0x128/0x300
[  223.035965][ T5533]  do_sendfile+0x8e4/0x1130
[  223.040452][ T5533]  ? compat_writev+0x3d0/0x3d0
[  223.045197][ T5533]  ? vfs_write+0x427/0x4f0
[  223.049596][ T5533]  ? check_preemption_disabled+0x15a/0x330
[  223.055383][ T5533]  __x64_sys_sendfile64+0x1ce/0x230
[  223.060562][ T5533]  ? __ia32_sys_sendfile+0x250/0x250
[  223.065829][ T5533]  do_syscall_64+0xcb/0x150
[  223.070316][ T5533]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  223.076189][ T5533] RIP: 0033:0x45e219
[  223.080065][ T5533] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  223.100082][ T5533] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  223.108494][ T5533] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
[  223.116453][ T5533] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
[  223.124404][ T5533] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
[  223.132355][ T5533] R10: 0800000080004103 R11: 0000000000000246 R12: 000000000000000d
[  223.140329][ T5533] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
[  223.148293][ T5539] CPU: 1 PID: 5539 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  223.158370][ T5539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  223.158374][ T5539] Call Trace:
[  223.158394][ T5539]  dump_stack+0x1dd/0x24e
[  223.158405][ T5539]  ? devkmsg_release+0x11c/0x11c
[  223.158413][ T5539]  ? show_regs_print_info+0x12/0x12
[  223.158423][ T5539]  ? stack_trace_save+0x120/0x1f0
[  223.158435][ T5539]  should_fail+0x6fb/0x860
[  223.158445][ T5539]  ? setup_fault_attr+0x3d0/0x3d0
[  223.158460][ T5539]  ? __kasan_kmalloc+0x189/0x1c0
[  223.205555][ T5539]  ? v9fs_session_init+0xaf/0x1a00
[  223.205571][ T5539]  should_failslab+0x5/0x20
[  223.215155][ T5539]  __kmalloc_track_caller+0x5d/0x2c0
[  223.215166][ T5539]  ? vfs_get_tree+0x85/0x260
[  223.215181][ T5539]  ? do_mount+0x18ab/0x2660
[  223.229491][ T5539]  ? ksys_mount+0xc2/0xf0
[  223.229499][ T5539]  ? __x64_sys_mount+0xb1/0xc0
[  223.229513][ T5539]  kstrdup+0x31/0x70
[  223.242446][ T5539]  v9fs_session_init+0xaf/0x1a00
[  223.242459][ T5539]  ? v9fs_show_options+0x530/0x530
[  223.242471][ T5539]  ? v9fs_mount+0x5c/0x790
[  223.242479][ T5539]  ? v9fs_mount+0x5c/0x790
[  223.242491][ T5539]  ? kmem_cache_alloc_trace+0xc3/0x290
[  223.242500][ T5539]  v9fs_mount+0x7f/0x790
[  223.242510][ T5539]  ? cap_capable+0x23f/0x280
[  223.242532][ T5539]  legacy_get_tree+0xde/0x170
[  223.280308][ T5539]  ? iterate_incfs_dir+0x370/0x370
[  223.280320][ T5539]  vfs_get_tree+0x85/0x260
[  223.280331][ T5539]  do_mount+0x18ab/0x2660
[  223.280346][ T5539]  ? copy_mount_string+0x30/0x30
[  223.299035][ T5539]  ? page_fault+0x2f/0x40
[  223.299048][ T5539]  ? copy_mount_options+0x1e8/0x320
[  223.299057][ T5539]  ? copy_mount_options+0x293/0x320
[  223.299072][ T5539]  ksys_mount+0xc2/0xf0
[  223.317846][ T5539]  __x64_sys_mount+0xb1/0xc0
[  223.317856][ T5539]  do_syscall_64+0xcb/0x150
[  223.317866][ T5539]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
21:38:46 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x100000000000000, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:46 executing program 4 (fault-call:3 fault-nth:7):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  223.317879][ T5539] RIP: 0033:0x45e219
[  223.336680][ T5539] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  223.336685][ T5539] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  223.336693][ T5539] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  223.336697][ T5539] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
21:38:47 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x4000000, 0x2e0)

21:38:47 executing program 1 (fault-call:12 fault-nth:14):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  223.336701][ T5539] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  223.336705][ T5539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  223.336709][ T5539] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  223.416132][ T5552] FAULT_INJECTION: forcing a failure.
[  223.416132][ T5552] name failslab, interval 1, probability 0, space 0, times 0
21:38:47 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x8000000, 0x2e0)

21:38:47 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0xe000000, 0x2e0)

[  223.429664][ T5552] CPU: 0 PID: 5552 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  223.439742][ T5552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  223.449783][ T5552] Call Trace:
[  223.453066][ T5552]  dump_stack+0x1dd/0x24e
[  223.457387][ T5552]  ? devkmsg_release+0x11c/0x11c
[  223.462314][ T5552]  ? show_regs_print_info+0x12/0x12
[  223.467504][ T5552]  should_fail+0x6fb/0x860
[  223.471912][ T5552]  ? setup_fault_attr+0x3d0/0x3d0
[  223.476967][ T5552]  ? __kasan_kmalloc+0x189/0x1c0
21:38:47 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x40000000, 0x2e0)

21:38:47 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x40000800, 0x2e0)

[  223.481898][ T5552]  ? v9fs_session_init+0xfa/0x1a00
[  223.487004][ T5552]  should_failslab+0x5/0x20
[  223.491505][ T5552]  __kmalloc_track_caller+0x5d/0x2c0
[  223.496807][ T5552]  ? vfs_get_tree+0x85/0x260
[  223.501390][ T5552]  ? kstrdup+0x4c/0x70
[  223.505449][ T5552]  kstrdup+0x31/0x70
[  223.509423][ T5552]  v9fs_session_init+0xfa/0x1a00
[  223.514357][ T5552]  ? v9fs_show_options+0x530/0x530
[  223.519459][ T5552]  ? v9fs_mount+0x5c/0x790
[  223.523865][ T5552]  ? v9fs_mount+0x5c/0x790
[  223.528278][ T5552]  ? kmem_cache_alloc_trace+0xc3/0x290
[  223.533728][ T5552]  v9fs_mount+0x7f/0x790
[  223.537963][ T5552]  ? cap_capable+0x23f/0x280
[  223.542558][ T5552]  legacy_get_tree+0xde/0x170
[  223.547255][ T5552]  ? iterate_incfs_dir+0x370/0x370
[  223.552361][ T5552]  vfs_get_tree+0x85/0x260
[  223.556795][ T5552]  do_mount+0x18ab/0x2660
[  223.561119][ T5552]  ? copy_mount_string+0x30/0x30
[  223.566053][ T5552]  ? page_fault+0x2f/0x40
[  223.570401][ T5552]  ? copy_mount_options+0x1e8/0x320
[  223.575591][ T5552]  ? copy_mount_options+0x293/0x320
[  223.580781][ T5552]  ksys_mount+0xc2/0xf0
[  223.584938][ T5552]  __x64_sys_mount+0xb1/0xc0
[  223.589543][ T5552]  do_syscall_64+0xcb/0x150
[  223.594061][ T5552]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  223.599943][ T5552] RIP: 0033:0x45e219
[  223.603819][ T5552] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  223.623404][ T5552] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
21:38:47 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)

[  223.631803][ T5552] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  223.639781][ T5552] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  223.647745][ T5552] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  223.655688][ T5552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  223.663642][ T5552] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  223.751576][ T5597] FAULT_INJECTION: forcing a failure.
[  223.751576][ T5597] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  223.770477][ T5597] CPU: 0 PID: 5597 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  223.780539][ T5597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  223.791046][ T5597] Call Trace:
[  223.794328][ T5597]  dump_stack+0x1dd/0x24e
[  223.798641][ T5597]  ? devkmsg_release+0x11c/0x11c
[  223.803574][ T5597]  ? show_regs_print_info+0x12/0x12
[  223.808753][ T5597]  ? preempt_count_add+0x66/0x150
[  223.813773][ T5597]  ? prep_new_page+0x132/0x380
[  223.818525][ T5597]  should_fail+0x6fb/0x860
[  223.822925][ T5597]  ? setup_fault_attr+0x3d0/0x3d0
[  223.827938][ T5597]  __alloc_pages_nodemask+0x1ee/0x7c0
[  223.833283][ T5597]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  223.838831][ T5597]  push_pipe+0x385/0x740
[  223.843077][ T5597]  iov_iter_get_pages_alloc+0xc2c/0x10f0
[  223.849043][ T5597]  ? iov_iter_get_pages+0xea0/0xea0
[  223.854228][ T5597]  default_file_splice_read+0x208/0x970
[  223.859766][ T5597]  ? splice_direct_to_actor+0x94e/0xb00
[  223.865303][ T5597]  ? do_splice_direct+0x288/0x3e0
[  223.870313][ T5597]  ? do_syscall_64+0xcb/0x150
[  223.874992][ T5597]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  223.881053][ T5597]  ? __ia32_sys_tee+0xa0/0xa0
[  223.885717][ T5597]  ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0
[  223.892467][ T5597]  ? selinux_file_permission+0x2d0/0x520
[  223.898092][ T5597]  ? security_file_permission+0x1e9/0x300
[  223.903811][ T5597]  ? __ia32_sys_tee+0xa0/0xa0
[  223.908460][ T5597]  splice_direct_to_actor+0x3cf/0xb00
[  223.913844][ T5597]  ? do_splice_direct+0x3e0/0x3e0
[  223.918944][ T5597]  ? pipe_to_sendpage+0x300/0x300
[  223.923962][ T5597]  ? security_file_permission+0x128/0x300
[  223.929671][ T5597]  do_splice_direct+0x288/0x3e0
[  223.934517][ T5597]  ? splice_direct_to_actor+0xb00/0xb00
[  223.940056][ T5597]  ? avc_policy_seqno+0x17/0x70
[  223.944892][ T5597]  ? security_file_permission+0x128/0x300
[  223.950609][ T5597]  do_sendfile+0x8e4/0x1130
[  223.955088][ T5597]  ? compat_writev+0x3d0/0x3d0
[  223.959836][ T5597]  ? vfs_write+0x427/0x4f0
[  223.964240][ T5597]  ? check_preemption_disabled+0x15a/0x330
[  223.970067][ T5597]  __x64_sys_sendfile64+0x1ce/0x230
[  223.975252][ T5597]  ? __ia32_sys_sendfile+0x250/0x250
[  223.980522][ T5597]  do_syscall_64+0xcb/0x150
[  223.985027][ T5597]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  223.990905][ T5597] RIP: 0033:0x45e219
[  223.994799][ T5597] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  224.014490][ T5597] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  224.022884][ T5597] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
[  224.030846][ T5597] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
[  224.038826][ T5597] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
[  224.046786][ T5597] R10: 0800000080004103 R11: 0000000000000246 R12: 000000000000000e
[  224.054734][ T5597] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
21:38:47 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0), 0x0, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:47 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0xfeffffff, 0x2e0)

21:38:47 executing program 4 (fault-call:3 fault-nth:8):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:47 executing program 1 (fault-call:12 fault-nth:15):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:47 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x400000000000000, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  224.371197][ T5612] FAULT_INJECTION: forcing a failure.
[  224.371197][ T5612] name failslab, interval 1, probability 0, space 0, times 0
[  224.385949][ T5612] CPU: 1 PID: 5612 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  224.394675][ T5616] FAULT_INJECTION: forcing a failure.
[  224.394675][ T5616] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  224.396010][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  224.396014][ T5612] Call Trace:
[  224.396032][ T5612]  dump_stack+0x1dd/0x24e
[  224.396057][ T5612]  ? devkmsg_release+0x11c/0x11c
[  224.431756][ T5612]  ? show_regs_print_info+0x12/0x12
[  224.436951][ T5612]  ? __kasan_kmalloc+0x189/0x1c0
[  224.441902][ T5612]  should_fail+0x6fb/0x860
[  224.446310][ T5612]  ? setup_fault_attr+0x3d0/0x3d0
[  224.451320][ T5612]  ? p9_client_create+0xc4/0xb90
[  224.456241][ T5612]  should_failslab+0x5/0x20
[  224.460734][ T5612]  kmem_cache_alloc_trace+0x39/0x290
[  224.466004][ T5612]  p9_client_create+0xc4/0xb90
21:38:48 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)

[  224.470754][ T5612]  ? p9_parse_header+0x6b0/0x6b0
[  224.475672][ T5612]  ? __kasan_kmalloc+0x189/0x1c0
[  224.480593][ T5612]  ? v9fs_session_init+0xfa/0x1a00
[  224.485691][ T5612]  ? __kmalloc_track_caller+0x20e/0x2c0
[  224.491221][ T5612]  ? vfs_get_tree+0x85/0x260
[  224.495801][ T5612]  ? kstrdup+0x4c/0x70
[  224.499862][ T5612]  v9fs_session_init+0x208/0x1a00
[  224.504880][ T5612]  ? v9fs_show_options+0x530/0x530
[  224.510000][ T5612]  ? v9fs_mount+0x5c/0x790
[  224.514420][ T5612]  ? kmem_cache_alloc_trace+0xc3/0x290
[  224.519887][ T5612]  ? legacy_init_fs_context+0x4d/0xc0
[  224.525243][ T5612]  v9fs_mount+0x7f/0x790
[  224.529470][ T5612]  ? cap_capable+0x23f/0x280
[  224.534044][ T5612]  legacy_get_tree+0xde/0x170
[  224.538708][ T5612]  ? iterate_incfs_dir+0x370/0x370
[  224.543807][ T5612]  vfs_get_tree+0x85/0x260
[  224.548230][ T5612]  do_mount+0x18ab/0x2660
[  224.552549][ T5612]  ? copy_mount_string+0x30/0x30
[  224.557466][ T5612]  ? page_fault+0x2f/0x40
[  224.561780][ T5612]  ? copy_mount_options+0x1e8/0x320
[  224.566961][ T5612]  ? copy_mount_options+0x293/0x320
[  224.572153][ T5612]  ksys_mount+0xc2/0xf0
[  224.576322][ T5612]  __x64_sys_mount+0xb1/0xc0
[  224.580897][ T5612]  do_syscall_64+0xcb/0x150
[  224.585387][ T5612]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  224.591272][ T5612] RIP: 0033:0x45e219
[  224.595148][ T5612] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  224.614824][ T5612] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  224.623221][ T5612] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  224.631175][ T5612] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  224.639129][ T5612] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  224.647085][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  224.655066][ T5612] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
21:38:48 executing program 4 (fault-call:3 fault-nth:9):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:48 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0xfffffffe, 0x2e0)

[  224.663040][ T5616] CPU: 0 PID: 5616 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  224.673185][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  224.683253][ T5616] Call Trace:
[  224.686537][ T5616]  dump_stack+0x1dd/0x24e
[  224.690860][ T5616]  ? devkmsg_release+0x11c/0x11c
[  224.695792][ T5616]  ? show_regs_print_info+0x12/0x12
[  224.700982][ T5616]  ? preempt_count_add+0x66/0x150
[  224.705994][ T5616]  ? prep_new_page+0x132/0x380
[  224.710733][ T5616]  should_fail+0x6fb/0x860
[  224.715124][ T5616]  ? setup_fault_attr+0x3d0/0x3d0
[  224.720121][ T5616]  __alloc_pages_nodemask+0x1ee/0x7c0
[  224.725462][ T5616]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  224.730979][ T5616]  push_pipe+0x385/0x740
[  224.735204][ T5616]  iov_iter_get_pages_alloc+0xc2c/0x10f0
[  224.741082][ T5616]  ? iov_iter_get_pages+0xea0/0xea0
[  224.746252][ T5616]  default_file_splice_read+0x208/0x970
[  224.751769][ T5616]  ? splice_direct_to_actor+0x94e/0xb00
[  224.757283][ T5616]  ? do_splice_direct+0x288/0x3e0
[  224.762284][ T5616]  ? do_syscall_64+0xcb/0x150
[  224.766943][ T5616]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  224.773037][ T5616]  ? __ia32_sys_tee+0xa0/0xa0
[  224.777708][ T5616]  ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0
[  224.784443][ T5616]  ? selinux_file_permission+0x2d0/0x520
[  224.790062][ T5616]  ? security_file_permission+0x1e9/0x300
[  224.795762][ T5616]  ? __ia32_sys_tee+0xa0/0xa0
[  224.800416][ T5616]  splice_direct_to_actor+0x3cf/0xb00
[  224.805766][ T5616]  ? do_splice_direct+0x3e0/0x3e0
[  224.810760][ T5616]  ? pipe_to_sendpage+0x300/0x300
[  224.815758][ T5616]  ? security_file_permission+0x128/0x300
[  224.821454][ T5616]  do_splice_direct+0x288/0x3e0
[  224.826279][ T5616]  ? splice_direct_to_actor+0xb00/0xb00
[  224.831816][ T5616]  ? avc_policy_seqno+0x17/0x70
[  224.836648][ T5616]  ? security_file_permission+0x128/0x300
[  224.842352][ T5616]  do_sendfile+0x8e4/0x1130
[  224.846836][ T5616]  ? compat_writev+0x3d0/0x3d0
[  224.851583][ T5616]  ? vfs_write+0x427/0x4f0
[  224.855987][ T5616]  ? check_preemption_disabled+0x15a/0x330
[  224.861775][ T5616]  __x64_sys_sendfile64+0x1ce/0x230
[  224.866953][ T5616]  ? __ia32_sys_sendfile+0x250/0x250
[  224.872209][ T5616]  do_syscall_64+0xcb/0x150
[  224.876690][ T5616]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  224.882585][ T5616] RIP: 0033:0x45e219
[  224.886478][ T5616] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  224.906054][ T5616] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  224.914447][ T5616] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
[  224.922393][ T5616] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
[  224.930337][ T5616] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
[  224.938295][ T5616] R10: 0800000080004103 R11: 0000000000000246 R12: 000000000000000f
[  224.946326][ T5616] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
21:38:48 executing program 1 (fault-call:12 fault-nth:16):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  224.970696][ T5641] FAULT_INJECTION: forcing a failure.
[  224.970696][ T5641] name failslab, interval 1, probability 0, space 0, times 0
[  224.983570][ T5641] CPU: 1 PID: 5641 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  224.993647][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  225.003700][ T5641] Call Trace:
[  225.007044][ T5641]  dump_stack+0x1dd/0x24e
[  225.011357][ T5641]  ? devkmsg_release+0x11c/0x11c
[  225.016273][ T5641]  ? show_regs_print_info+0x12/0x12
[  225.021444][ T5641]  ? __kasan_kmalloc+0x189/0x1c0
[  225.026407][ T5641]  should_fail+0x6fb/0x860
[  225.030796][ T5641]  ? setup_fault_attr+0x3d0/0x3d0
[  225.035811][ T5641]  ? p9_client_create+0xc4/0xb90
[  225.040731][ T5641]  should_failslab+0x5/0x20
[  225.045217][ T5641]  kmem_cache_alloc_trace+0x39/0x290
[  225.050472][ T5641]  p9_client_create+0xc4/0xb90
[  225.055209][ T5641]  ? p9_parse_header+0x6b0/0x6b0
[  225.060153][ T5641]  ? __kasan_kmalloc+0x189/0x1c0
[  225.065064][ T5641]  ? v9fs_session_init+0xfa/0x1a00
[  225.070147][ T5641]  ? __kmalloc_track_caller+0x20e/0x2c0
[  225.075661][ T5641]  ? vfs_get_tree+0x85/0x260
[  225.080309][ T5641]  ? kstrdup+0x4c/0x70
[  225.084348][ T5641]  v9fs_session_init+0x208/0x1a00
[  225.089355][ T5641]  ? v9fs_show_options+0x530/0x530
[  225.094437][ T5641]  ? v9fs_mount+0x5c/0x790
[  225.098832][ T5641]  ? kmem_cache_alloc_trace+0xc3/0x290
[  225.104265][ T5641]  ? legacy_init_fs_context+0x4d/0xc0
[  225.109609][ T5641]  v9fs_mount+0x7f/0x790
[  225.113827][ T5641]  ? cap_capable+0x23f/0x280
[  225.118390][ T5641]  legacy_get_tree+0xde/0x170
[  225.123039][ T5641]  ? iterate_incfs_dir+0x370/0x370
[  225.128121][ T5641]  vfs_get_tree+0x85/0x260
[  225.132534][ T5641]  do_mount+0x18ab/0x2660
[  225.136844][ T5641]  ? copy_mount_string+0x30/0x30
[  225.141779][ T5641]  ? page_fault+0x2f/0x40
[  225.146101][ T5641]  ? copy_mount_options+0x1e8/0x320
[  225.151271][ T5641]  ? copy_mount_options+0x293/0x320
[  225.156455][ T5641]  ksys_mount+0xc2/0xf0
[  225.161122][ T5641]  __x64_sys_mount+0xb1/0xc0
[  225.165700][ T5641]  do_syscall_64+0xcb/0x150
21:38:48 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)

[  225.170179][ T5641]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  225.176084][ T5641] RIP: 0033:0x45e219
[  225.179985][ T5641] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  225.199591][ T5641] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  225.207995][ T5641] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  225.215960][ T5641] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
21:38:48 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0xe00000000000000, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:48 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x80000000000, 0x2e0)

[  225.223916][ T5641] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  225.231861][ T5641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  225.239809][ T5641] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
21:38:48 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0), 0x0, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

21:38:48 executing program 4 (fault-call:3 fault-nth:10):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  225.317523][ T5663] FAULT_INJECTION: forcing a failure.
[  225.317523][ T5663] name failslab, interval 1, probability 0, space 0, times 0
[  225.330222][ T5663] CPU: 1 PID: 5663 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  225.340274][ T5663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  225.350317][ T5663] Call Trace:
[  225.353610][ T5663]  dump_stack+0x1dd/0x24e
[  225.357922][ T5663]  ? devkmsg_release+0x11c/0x11c
[  225.369353][ T5663]  ? show_regs_print_info+0x12/0x12
[  225.374557][ T5663]  should_fail+0x6fb/0x860
[  225.378960][ T5663]  ? setup_fault_attr+0x3d0/0x3d0
[  225.383968][ T5663]  ? match_token+0x6a2/0x710
[  225.388540][ T5663]  ? p9_client_create+0x506/0xb90
[  225.393540][ T5663]  should_failslab+0x5/0x20
[  225.398023][ T5663]  __kmalloc_track_caller+0x5d/0x2c0
[  225.403285][ T5663]  ? kstrdup+0x4c/0x70
[  225.407333][ T5663]  kmemdup_nul+0x27/0xa0
[  225.411553][ T5663]  p9_client_create+0x506/0xb90
[  225.416382][ T5663]  ? p9_parse_header+0x6b0/0x6b0
[  225.421315][ T5663]  ? __kasan_kmalloc+0x189/0x1c0
[  225.426229][ T5663]  ? __kmalloc_track_caller+0x20e/0x2c0
[  225.431770][ T5663]  ? vfs_get_tree+0x85/0x260
[  225.436339][ T5663]  v9fs_session_init+0x208/0x1a00
[  225.441346][ T5663]  ? v9fs_show_options+0x530/0x530
[  225.446443][ T5663]  ? v9fs_mount+0x5c/0x790
[  225.450854][ T5663]  ? kmem_cache_alloc_trace+0xc3/0x290
[  225.456378][ T5663]  ? legacy_init_fs_context+0x4d/0xc0
[  225.461744][ T5663]  v9fs_mount+0x7f/0x790
[  225.465970][ T5663]  ? cap_capable+0x23f/0x280
[  225.470545][ T5663]  legacy_get_tree+0xde/0x170
[  225.475220][ T5663]  ? iterate_incfs_dir+0x370/0x370
[  225.480319][ T5663]  vfs_get_tree+0x85/0x260
[  225.484720][ T5663]  do_mount+0x18ab/0x2660
[  225.489041][ T5663]  ? copy_mount_string+0x30/0x30
[  225.493972][ T5663]  ? page_fault+0x2f/0x40
[  225.498288][ T5663]  ? copy_mount_options+0x1e8/0x320
[  225.503466][ T5663]  ? copy_mount_options+0x293/0x320
[  225.508646][ T5663]  ksys_mount+0xc2/0xf0
[  225.512789][ T5663]  __x64_sys_mount+0xb1/0xc0
[  225.517374][ T5663]  do_syscall_64+0xcb/0x150
[  225.522036][ T5663]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  225.527909][ T5663] RIP: 0033:0x45e219
[  225.531784][ T5663] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  225.551557][ T5663] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  225.559958][ T5663] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  225.568003][ T5663] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  225.575958][ T5663] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  225.583912][ T5663] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a
[  225.592044][ T5663] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  225.670569][ T5672] FAULT_INJECTION: forcing a failure.
[  225.670569][ T5672] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  225.696073][ T5672] CPU: 0 PID: 5672 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  225.706239][ T5672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  225.716553][ T5672] Call Trace:
[  225.719851][ T5672]  dump_stack+0x1dd/0x24e
[  225.724185][ T5672]  ? devkmsg_release+0x11c/0x11c
[  225.729130][ T5672]  ? show_regs_print_info+0x12/0x12
[  225.734340][ T5672]  ? preempt_count_add+0x66/0x150
[  225.739388][ T5672]  ? prep_new_page+0x132/0x380
[  225.744146][ T5672]  should_fail+0x6fb/0x860
[  225.748548][ T5672]  ? setup_fault_attr+0x3d0/0x3d0
[  225.753674][ T5672]  __alloc_pages_nodemask+0x1ee/0x7c0
[  225.759071][ T5672]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  225.764604][ T5672]  push_pipe+0x385/0x740
[  225.768849][ T5672]  iov_iter_get_pages_alloc+0xc2c/0x10f0
[  225.774461][ T5672]  ? iov_iter_get_pages+0xea0/0xea0
[  225.779647][ T5672]  default_file_splice_read+0x208/0x970
[  225.785261][ T5672]  ? splice_direct_to_actor+0x94e/0xb00
[  225.790798][ T5672]  ? do_splice_direct+0x288/0x3e0
[  225.795791][ T5672]  ? do_syscall_64+0xcb/0x150
[  225.800451][ T5672]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  225.806505][ T5672]  ? __ia32_sys_tee+0xa0/0xa0
[  225.811189][ T5672]  ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0
[  225.818010][ T5672]  ? selinux_file_permission+0x2d0/0x520
[  225.823621][ T5672]  ? security_file_permission+0x1e9/0x300
[  225.829310][ T5672]  ? __ia32_sys_tee+0xa0/0xa0
[  225.833955][ T5672]  splice_direct_to_actor+0x3cf/0xb00
[  225.839307][ T5672]  ? do_splice_direct+0x3e0/0x3e0
[  225.844309][ T5672]  ? pipe_to_sendpage+0x300/0x300
[  225.849303][ T5672]  ? security_file_permission+0x128/0x300
[  225.854986][ T5672]  do_splice_direct+0x288/0x3e0
[  225.859821][ T5672]  ? splice_direct_to_actor+0xb00/0xb00
[  225.865343][ T5672]  ? avc_policy_seqno+0x17/0x70
[  225.870268][ T5672]  ? security_file_permission+0x128/0x300
[  225.875964][ T5672]  do_sendfile+0x8e4/0x1130
[  225.880440][ T5672]  ? compat_writev+0x3d0/0x3d0
[  225.885174][ T5672]  ? vfs_write+0x427/0x4f0
[  225.889565][ T5672]  ? check_preemption_disabled+0x15a/0x330
[  225.895349][ T5672]  __x64_sys_sendfile64+0x1ce/0x230
[  225.900518][ T5672]  ? __ia32_sys_sendfile+0x250/0x250
[  225.905799][ T5672]  do_syscall_64+0xcb/0x150
[  225.910276][ T5672]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  225.916142][ T5672] RIP: 0033:0x45e219
[  225.920011][ T5672] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  225.939586][ T5672] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  225.948068][ T5672] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
[  225.956015][ T5672] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
[  225.963957][ T5672] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
21:38:49 executing program 4 (fault-call:3 fault-nth:11):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:49 executing program 1 (fault-call:12 fault-nth:17):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

[  225.971900][ T5672] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000010
[  225.979841][ T5672] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
[  226.018209][ T5677] FAULT_INJECTION: forcing a failure.
[  226.018209][ T5677] name failslab, interval 1, probability 0, space 0, times 0
[  226.031026][ T5677] CPU: 0 PID: 5677 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  226.041083][ T5677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  226.051128][ T5677] Call Trace:
[  226.054464][ T5677]  dump_stack+0x1dd/0x24e
[  226.058780][ T5677]  ? devkmsg_release+0x11c/0x11c
[  226.063707][ T5677]  ? show_regs_print_info+0x12/0x12
[  226.068897][ T5677]  ? stack_trace_save+0x120/0x1f0
[  226.073913][ T5677]  ? stack_trace_snprint+0x150/0x150
[  226.079215][ T5677]  should_fail+0x6fb/0x860
[  226.083626][ T5677]  ? setup_fault_attr+0x3d0/0x3d0
[  226.088646][ T5677]  ? slab_free_freelist_hook+0xd0/0x150
[  226.094173][ T5677]  ? kfree+0x12c/0x660
[  226.098233][ T5677]  ? p9_client_create+0x789/0xb90
[  226.103241][ T5677]  ? v9fs_session_init+0x208/0x1a00
[  226.108419][ T5677]  ? v9fs_mount+0x7f/0x790
[  226.112818][ T5677]  ? vfs_get_tree+0x85/0x260
[  226.117387][ T5677]  ? do_mount+0x18ab/0x2660
[  226.121868][ T5677]  ? ksys_mount+0xc2/0xf0
[  226.126191][ T5677]  ? parse_opts+0x1a1/0x6e0
[  226.130687][ T5677]  should_failslab+0x5/0x20
[  226.135608][ T5677]  __kmalloc_track_caller+0x5d/0x2c0
[  226.140873][ T5677]  kstrdup+0x31/0x70
[  226.144756][ T5677]  parse_opts+0x1a1/0x6e0
[  226.149087][ T5677]  ? p9_fd_show_options+0x1a0/0x1a0
[  226.154267][ T5677]  p9_fd_create+0x91/0x480
[  226.158673][ T5677]  ? p9_client_create+0x789/0xb90
[  226.163790][ T5677]  ? p9_fd_create_unix+0x470/0x470
[  226.168895][ T5677]  ? __kmalloc_track_caller+0x20e/0x2c0
[  226.174421][ T5677]  ? kmemdup_nul+0x42/0xa0
[  226.178841][ T5677]  p9_client_create+0x81b/0xb90
[  226.183688][ T5677]  ? p9_parse_header+0x6b0/0x6b0
[  226.188621][ T5677]  ? __kasan_kmalloc+0x189/0x1c0
[  226.193540][ T5677]  ? __kmalloc_track_caller+0x20e/0x2c0
[  226.199064][ T5677]  ? vfs_get_tree+0x85/0x260
[  226.203636][ T5677]  v9fs_session_init+0x208/0x1a00
[  226.208646][ T5677]  ? v9fs_show_options+0x530/0x530
[  226.213739][ T5677]  ? v9fs_mount+0x5c/0x790
[  226.218138][ T5677]  ? kmem_cache_alloc_trace+0xc3/0x290
[  226.223578][ T5677]  ? legacy_init_fs_context+0x4d/0xc0
[  226.228930][ T5677]  v9fs_mount+0x7f/0x790
[  226.233154][ T5677]  ? cap_capable+0x23f/0x280
[  226.237727][ T5677]  legacy_get_tree+0xde/0x170
[  226.242382][ T5677]  ? iterate_incfs_dir+0x370/0x370
[  226.247656][ T5677]  vfs_get_tree+0x85/0x260
[  226.252056][ T5677]  do_mount+0x18ab/0x2660
[  226.256370][ T5677]  ? copy_mount_string+0x30/0x30
[  226.261286][ T5677]  ? page_fault+0x2f/0x40
[  226.265600][ T5677]  ? copy_mount_options+0x1e8/0x320
[  226.270785][ T5677]  ? copy_mount_options+0x293/0x320
[  226.275964][ T5677]  ksys_mount+0xc2/0xf0
[  226.280112][ T5677]  __x64_sys_mount+0xb1/0xc0
[  226.284692][ T5677]  do_syscall_64+0xcb/0x150
[  226.289185][ T5677]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  226.295070][ T5677] RIP: 0033:0x45e219
[  226.298951][ T5677] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
21:38:49 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)

[  226.318563][ T5677] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  226.327039][ T5677] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  226.334991][ T5677] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  226.342943][ T5677] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  226.350894][ T5677] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b
[  226.358846][ T5677] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
21:38:49 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x200000000000, 0x2e0)

21:38:50 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x4000000000000000, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  226.387853][ T5677] 9pnet: Insufficient options for proto=fd
21:38:50 executing program 4 (fault-call:3 fault-nth:12):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  226.478777][ T5697] FAULT_INJECTION: forcing a failure.
[  226.478777][ T5697] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  226.492637][ T5697] CPU: 1 PID: 5697 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  226.502692][ T5697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  226.512742][ T5697] Call Trace:
[  226.516008][ T5697]  dump_stack+0x1dd/0x24e
[  226.520339][ T5697]  ? devkmsg_release+0x11c/0x11c
[  226.525249][ T5697]  ? show_regs_print_info+0x12/0x12
[  226.530423][ T5697]  ? preempt_count_add+0x66/0x150
[  226.535430][ T5697]  ? prep_new_page+0x132/0x380
[  226.540198][ T5697]  should_fail+0x6fb/0x860
[  226.544587][ T5697]  ? setup_fault_attr+0x3d0/0x3d0
[  226.549598][ T5697]  __alloc_pages_nodemask+0x1ee/0x7c0
[  226.554943][ T5697]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  226.560484][ T5697]  push_pipe+0x385/0x740
[  226.564803][ T5697]  iov_iter_get_pages_alloc+0xc2c/0x10f0
[  226.570432][ T5697]  ? iov_iter_get_pages+0xea0/0xea0
[  226.575624][ T5697]  default_file_splice_read+0x208/0x970
[  226.581142][ T5697]  ? splice_direct_to_actor+0x94e/0xb00
[  226.586656][ T5697]  ? do_splice_direct+0x288/0x3e0
[  226.591660][ T5697]  ? do_syscall_64+0xcb/0x150
[  226.596332][ T5697]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  226.602373][ T5697]  ? __ia32_sys_tee+0xa0/0xa0
[  226.607032][ T5697]  ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0
[  226.613784][ T5697]  ? selinux_file_permission+0x2d0/0x520
[  226.619405][ T5697]  ? security_file_permission+0x1e9/0x300
[  226.625106][ T5697]  ? __ia32_sys_tee+0xa0/0xa0
[  226.629753][ T5697]  splice_direct_to_actor+0x3cf/0xb00
[  226.635096][ T5697]  ? do_splice_direct+0x3e0/0x3e0
[  226.640088][ T5697]  ? pipe_to_sendpage+0x300/0x300
[  226.645081][ T5697]  ? security_file_permission+0x128/0x300
[  226.650883][ T5697]  do_splice_direct+0x288/0x3e0
[  226.655715][ T5697]  ? splice_direct_to_actor+0xb00/0xb00
[  226.661242][ T5697]  ? avc_policy_seqno+0x17/0x70
[  226.666075][ T5697]  ? security_file_permission+0x128/0x300
[  226.671789][ T5697]  do_sendfile+0x8e4/0x1130
[  226.676287][ T5697]  ? compat_writev+0x3d0/0x3d0
[  226.681052][ T5697]  ? vfs_write+0x427/0x4f0
[  226.685440][ T5697]  ? check_preemption_disabled+0x15a/0x330
[  226.691214][ T5697]  __x64_sys_sendfile64+0x1ce/0x230
[  226.696384][ T5697]  ? __ia32_sys_sendfile+0x250/0x250
[  226.701646][ T5697]  do_syscall_64+0xcb/0x150
[  226.706124][ T5697]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  226.711986][ T5697] RIP: 0033:0x45e219
[  226.715865][ T5697] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  226.735715][ T5697] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  226.744096][ T5697] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
[  226.752043][ T5697] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
[  226.759986][ T5697] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
[  226.767943][ T5697] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000011
[  226.775899][ T5697] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
[  226.794750][ T5703] FAULT_INJECTION: forcing a failure.
[  226.794750][ T5703] name failslab, interval 1, probability 0, space 0, times 0
[  226.794768][ T5703] CPU: 1 PID: 5703 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  226.817391][ T5703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  226.817394][ T5703] Call Trace:
[  226.817411][ T5703]  dump_stack+0x1dd/0x24e
[  226.817427][ T5703]  ? devkmsg_release+0x11c/0x11c
[  226.839945][ T5703]  ? p9_client_create+0x81b/0xb90
[  226.839966][ T5703]  ? show_regs_print_info+0x12/0x12
[  226.850138][ T5703]  ? vfs_get_tree+0x85/0x260
[  226.850149][ T5703]  ? ksys_mount+0xc2/0xf0
[  226.850168][ T5703]  ? __x64_sys_mount+0xb1/0xc0
[  226.863770][ T5703]  ? do_syscall_64+0xcb/0x150
[  226.863783][ T5703]  should_fail+0x6fb/0x860
[  226.863794][ T5703]  ? setup_fault_attr+0x3d0/0x3d0
[  226.863804][ T5703]  ? simple_strtoul+0x107/0x1e0
[  226.863813][ T5703]  ? simple_strtoull+0x1e0/0x1e0
[  226.863824][ T5703]  ? match_int+0xd9/0x1e0
[  226.863838][ T5703]  should_failslab+0x5/0x20
[  226.896359][ T5703]  __kmalloc_track_caller+0x5d/0x2c0
[  226.896375][ T5703]  kmemdup_nul+0x27/0xa0
[  226.905909][ T5703]  match_int+0xd9/0x1e0
[  226.905920][ T5703]  ? match_token+0x710/0x710
[  226.905937][ T5703]  ? __kmalloc_track_caller+0x20e/0x2c0
[  226.921249][ T5703]  ? kstrdup+0x4c/0x70
[  226.921268][ T5703]  parse_opts+0x2a6/0x6e0
[  226.929670][ T5703]  ? p9_fd_show_options+0x1a0/0x1a0
[  226.929684][ T5703]  p9_fd_create+0x91/0x480
[  226.929693][ T5703]  ? p9_client_create+0x789/0xb90
[  226.929702][ T5703]  ? p9_fd_create_unix+0x470/0x470
[  226.929714][ T5703]  ? __kmalloc_track_caller+0x20e/0x2c0
[  226.929731][ T5703]  ? kmemdup_nul+0x42/0xa0
[  226.959390][ T5703]  p9_client_create+0x81b/0xb90
[  226.959406][ T5703]  ? p9_parse_header+0x6b0/0x6b0
[  226.969221][ T5703]  ? __kasan_kmalloc+0x189/0x1c0
[  226.969234][ T5703]  ? __kmalloc_track_caller+0x20e/0x2c0
[  226.969252][ T5703]  ? vfs_get_tree+0x85/0x260
[  226.984321][ T5703]  v9fs_session_init+0x208/0x1a00
[  226.984335][ T5703]  ? v9fs_show_options+0x530/0x530
[  226.994449][ T5703]  ? v9fs_mount+0x5c/0x790
[  226.994463][ T5703]  ? kmem_cache_alloc_trace+0xc3/0x290
[  226.994474][ T5703]  ? legacy_init_fs_context+0x4d/0xc0
[  226.994483][ T5703]  v9fs_mount+0x7f/0x790
[  226.994493][ T5703]  ? cap_capable+0x23f/0x280
[  226.994507][ T5703]  legacy_get_tree+0xde/0x170
[  227.023127][ T5703]  ? iterate_incfs_dir+0x370/0x370
[  227.023138][ T5703]  vfs_get_tree+0x85/0x260
[  227.023154][ T5703]  do_mount+0x18ab/0x2660
[  227.036971][ T5703]  ? copy_mount_string+0x30/0x30
[  227.036980][ T5703]  ? page_fault+0x2f/0x40
[  227.037003][ T5703]  ? copy_mount_options+0x1e8/0x320
[  227.037011][ T5703]  ? copy_mount_options+0x293/0x320
[  227.037020][ T5703]  ksys_mount+0xc2/0xf0
[  227.037034][ T5703]  __x64_sys_mount+0xb1/0xc0
[  227.065302][ T5703]  do_syscall_64+0xcb/0x150
[  227.065313][ T5703]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  227.065327][ T5703] RIP: 0033:0x45e219
[  227.079567][ T5703] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  227.079572][ T5703] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  227.079580][ T5703] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  227.079585][ T5703] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  227.079591][ T5703] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
21:38:50 executing program 4 (fault-call:3 fault-nth:13):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:50 executing program 1 (fault-call:12 fault-nth:18):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:50 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x1000000000000, 0x2e0)

[  227.079596][ T5703] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c
[  227.079601][ T5703] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  227.081591][ T5703] 9pnet: Insufficient options for proto=fd
[  227.180674][ T5706] FAULT_INJECTION: forcing a failure.
[  227.180674][ T5706] name failslab, interval 1, probability 0, space 0, times 0
[  227.194416][ T5706] CPU: 1 PID: 5706 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  227.204499][ T5706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  227.214553][ T5706] Call Trace:
[  227.217838][ T5706]  dump_stack+0x1dd/0x24e
[  227.222155][ T5706]  ? devkmsg_release+0x11c/0x11c
[  227.227070][ T5706]  ? show_regs_print_info+0x12/0x12
[  227.232259][ T5706]  should_fail+0x6fb/0x860
[  227.236658][ T5706]  ? setup_fault_attr+0x3d0/0x3d0
[  227.241659][ T5706]  ? simple_strtoul+0x107/0x1e0
[  227.246488][ T5706]  ? simple_strtoull+0x1e0/0x1e0
[  227.251407][ T5706]  ? match_int+0xd9/0x1e0
[  227.255714][ T5706]  should_failslab+0x5/0x20
[  227.260203][ T5706]  __kmalloc_track_caller+0x5d/0x2c0
[  227.265467][ T5706]  ? kmemdup_nul+0x42/0xa0
[  227.269861][ T5706]  kmemdup_nul+0x27/0xa0
[  227.274082][ T5706]  match_int+0xd9/0x1e0
[  227.278262][ T5706]  ? match_token+0x710/0x710
[  227.282834][ T5706]  ? __kmalloc_track_caller+0x20e/0x2c0
[  227.288355][ T5706]  ? kstrdup+0x4c/0x70
[  227.292443][ T5706]  parse_opts+0x2a6/0x6e0
[  227.296761][ T5706]  ? p9_fd_show_options+0x1a0/0x1a0
[  227.301941][ T5706]  p9_fd_create+0x91/0x480
[  227.306331][ T5706]  ? p9_client_create+0x789/0xb90
[  227.311344][ T5706]  ? p9_fd_create_unix+0x470/0x470
[  227.316447][ T5706]  ? __kmalloc_track_caller+0x20e/0x2c0
[  227.321970][ T5706]  ? kmemdup_nul+0x42/0xa0
[  227.326362][ T5706]  p9_client_create+0x81b/0xb90
[  227.331194][ T5706]  ? p9_parse_header+0x6b0/0x6b0
[  227.336133][ T5706]  ? __kasan_kmalloc+0x189/0x1c0
[  227.341050][ T5706]  ? __kmalloc_track_caller+0x20e/0x2c0
[  227.346572][ T5706]  ? vfs_get_tree+0x85/0x260
[  227.351140][ T5706]  v9fs_session_init+0x208/0x1a00
[  227.356147][ T5706]  ? v9fs_show_options+0x530/0x530
[  227.361238][ T5706]  ? v9fs_mount+0x5c/0x790
[  227.365658][ T5706]  ? v9fs_mount+0x5c/0x790
[  227.370067][ T5706]  ? kmem_cache_alloc_trace+0xc3/0x290
[  227.375502][ T5706]  v9fs_mount+0x7f/0x790
[  227.379743][ T5706]  ? cap_capable+0x23f/0x280
[  227.384309][ T5706]  legacy_get_tree+0xde/0x170
[  227.388964][ T5706]  ? iterate_incfs_dir+0x370/0x370
[  227.394138][ T5706]  vfs_get_tree+0x85/0x260
[  227.398537][ T5706]  do_mount+0x18ab/0x2660
[  227.402846][ T5706]  ? copy_mount_string+0x30/0x30
[  227.407759][ T5706]  ? page_fault+0x2f/0x40
[  227.412081][ T5706]  ? copy_mount_options+0x1e8/0x320
[  227.417259][ T5706]  ? copy_mount_options+0x293/0x320
[  227.422434][ T5706]  ksys_mount+0xc2/0xf0
[  227.426570][ T5706]  __x64_sys_mount+0xb1/0xc0
[  227.431146][ T5706]  do_syscall_64+0xcb/0x150
[  227.435630][ T5706]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  227.441498][ T5706] RIP: 0033:0x45e219
[  227.445375][ T5706] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  227.464956][ T5706] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  227.473356][ T5706] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
21:38:51 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)

21:38:51 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0), 0x0, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

[  227.481304][ T5706] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  227.489261][ T5706] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  227.497210][ T5706] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d
[  227.505158][ T5706] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
21:38:51 executing program 4 (fault-call:3 fault-nth:14):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:51 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x4000080000000000, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  227.537733][ T5706] 9pnet: Insufficient options for proto=fd
[  227.573109][ T5723] FAULT_INJECTION: forcing a failure.
[  227.573109][ T5723] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  227.609370][ T5723] CPU: 0 PID: 5723 Comm: syz-executor.1 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  227.612964][ T5730] FAULT_INJECTION: forcing a failure.
[  227.612964][ T5730] name failslab, interval 1, probability 0, space 0, times 0
[  227.619459][ T5723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  227.619463][ T5723] Call Trace:
[  227.619481][ T5723]  dump_stack+0x1dd/0x24e
[  227.619493][ T5723]  ? devkmsg_release+0x11c/0x11c
[  227.619505][ T5723]  ? show_regs_print_info+0x12/0x12
[  227.619515][ T5723]  ? preempt_count_add+0x66/0x150
[  227.619526][ T5723]  ? prep_new_page+0x132/0x380
[  227.619539][ T5723]  should_fail+0x6fb/0x860
[  227.619550][ T5723]  ? setup_fault_attr+0x3d0/0x3d0
[  227.619560][ T5723]  __alloc_pages_nodemask+0x1ee/0x7c0
[  227.619571][ T5723]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  227.619585][ T5723]  push_pipe+0x385/0x740
[  227.619596][ T5723]  iov_iter_get_pages_alloc+0xc2c/0x10f0
[  227.619611][ T5723]  ? iov_iter_get_pages+0xea0/0xea0
[  227.704904][ T5723]  default_file_splice_read+0x208/0x970
[  227.710431][ T5723]  ? splice_direct_to_actor+0x94e/0xb00
[  227.715957][ T5723]  ? do_splice_direct+0x288/0x3e0
[  227.721663][ T5723]  ? do_syscall_64+0xcb/0x150
[  227.726322][ T5723]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  227.732368][ T5723]  ? __ia32_sys_tee+0xa0/0xa0
[  227.737039][ T5723]  ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0
[  227.743781][ T5723]  ? selinux_file_permission+0x2d0/0x520
[  227.749394][ T5723]  ? security_file_permission+0x1e9/0x300
[  227.755110][ T5723]  ? __ia32_sys_tee+0xa0/0xa0
[  227.759766][ T5723]  splice_direct_to_actor+0x3cf/0xb00
[  227.765123][ T5723]  ? do_splice_direct+0x3e0/0x3e0
[  227.770128][ T5723]  ? pipe_to_sendpage+0x300/0x300
[  227.775134][ T5723]  ? security_file_permission+0x128/0x300
[  227.780831][ T5723]  do_splice_direct+0x288/0x3e0
[  227.785682][ T5723]  ? splice_direct_to_actor+0xb00/0xb00
[  227.791208][ T5723]  ? avc_policy_seqno+0x17/0x70
[  227.796043][ T5723]  ? security_file_permission+0x128/0x300
[  227.801743][ T5723]  do_sendfile+0x8e4/0x1130
[  227.806230][ T5723]  ? compat_writev+0x3d0/0x3d0
[  227.810979][ T5723]  ? vfs_write+0x427/0x4f0
[  227.815377][ T5723]  ? check_preemption_disabled+0x15a/0x330
[  227.821165][ T5723]  __x64_sys_sendfile64+0x1ce/0x230
[  227.826362][ T5723]  ? __ia32_sys_sendfile+0x250/0x250
[  227.831631][ T5723]  do_syscall_64+0xcb/0x150
[  227.836119][ T5723]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  227.841994][ T5723] RIP: 0033:0x45e219
[  227.845880][ T5723] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  227.865463][ T5723] RSP: 002b:00007f1a9f201c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  227.873939][ T5723] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045e219
[  227.881910][ T5723] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006
[  227.889861][ T5723] RBP: 00007f1a9f201ca0 R08: 0000000000000000 R09: 0000000000000000
[  227.897819][ T5723] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000012
21:38:51 executing program 4 (fault-call:3 fault-nth:15):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  227.905787][ T5723] R13: 00007ffdb6cfb7df R14: 00007f1a9f2029c0 R15: 000000000119bf8c
[  227.913766][ T5730] CPU: 1 PID: 5730 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  227.923828][ T5730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  227.923831][ T5730] Call Trace:
[  227.923847][ T5730]  dump_stack+0x1dd/0x24e
[  227.923858][ T5730]  ? devkmsg_release+0x11c/0x11c
[  227.923868][ T5730]  ? show_regs_print_info+0x12/0x12
21:38:51 executing program 4 (fault-call:3 fault-nth:16):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:51 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x100000000000000, 0x2e0)

[  227.923878][ T5730]  ? parse_opts+0x53c/0x6e0
[  227.923896][ T5730]  should_fail+0x6fb/0x860
[  227.923906][ T5730]  ? setup_fault_attr+0x3d0/0x3d0
[  227.923916][ T5730]  ? p9_fd_create+0x161/0x480
[  227.923926][ T5730]  should_failslab+0x5/0x20
[  227.923937][ T5730]  kmem_cache_alloc_trace+0x39/0x290
21:38:51 executing program 4 (fault-call:3 fault-nth:17):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  227.923946][ T5730]  p9_fd_create+0x161/0x480
[  227.923954][ T5730]  ? p9_client_create+0x789/0xb90
[  227.923963][ T5730]  ? p9_fd_create_unix+0x470/0x470
[  227.923972][ T5730]  ? __kmalloc_track_caller+0x20e/0x2c0
[  227.923981][ T5730]  ? kmemdup_nul+0x42/0xa0
[  227.923991][ T5730]  p9_client_create+0x81b/0xb90
[  227.924002][ T5730]  ? p9_parse_header+0x6b0/0x6b0
[  227.924011][ T5730]  ? __kasan_kmalloc+0x189/0x1c0
[  227.924021][ T5730]  ? __kmalloc_track_caller+0x20e/0x2c0
[  227.924028][ T5730]  ? vfs_get_tree+0x85/0x260
[  227.924039][ T5730]  v9fs_session_init+0x208/0x1a00
[  227.924052][ T5730]  ? v9fs_show_options+0x530/0x530
[  227.924064][ T5730]  ? v9fs_mount+0x5c/0x790
[  227.924073][ T5730]  ? kmem_cache_alloc_trace+0xc3/0x290
[  227.924083][ T5730]  ? legacy_init_fs_context+0x4d/0xc0
21:38:51 executing program 4 (fault-call:3 fault-nth:18):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  227.924093][ T5730]  v9fs_mount+0x7f/0x790
[  227.924103][ T5730]  ? cap_capable+0x23f/0x280
[  227.924113][ T5730]  legacy_get_tree+0xde/0x170
[  227.924127][ T5730]  ? iterate_incfs_dir+0x370/0x370
[  227.924136][ T5730]  vfs_get_tree+0x85/0x260
[  227.924147][ T5730]  do_mount+0x18ab/0x2660
[  227.924159][ T5730]  ? copy_mount_string+0x30/0x30
[  227.924167][ T5730]  ? page_fault+0x2f/0x40
[  227.924179][ T5730]  ? copy_mount_options+0x1e8/0x320
[  227.924187][ T5730]  ? copy_mount_options+0x293/0x320
[  227.924197][ T5730]  ksys_mount+0xc2/0xf0
[  227.924207][ T5730]  __x64_sys_mount+0xb1/0xc0
[  227.924218][ T5730]  do_syscall_64+0xcb/0x150
[  227.924228][ T5730]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  227.924237][ T5730] RIP: 0033:0x45e219
[  227.924246][ T5730] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  227.924251][ T5730] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  227.924261][ T5730] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
21:38:51 executing program 4 (fault-call:3 fault-nth:19):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  227.924266][ T5730] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  227.924271][ T5730] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  227.924277][ T5730] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e
[  227.924282][ T5730] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  227.960202][ T5741] FAULT_INJECTION: forcing a failure.
[  227.960202][ T5741] name failslab, interval 1, probability 0, space 0, times 0
[  227.960215][ T5741] CPU: 0 PID: 5741 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  227.960220][ T5741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  227.960222][ T5741] Call Trace:
[  227.960237][ T5741]  dump_stack+0x1dd/0x24e
[  227.960247][ T5741]  ? devkmsg_release+0x11c/0x11c
[  227.960256][ T5741]  ? show_regs_print_info+0x12/0x12
[  227.960266][ T5741]  ? parse_opts+0x53c/0x6e0
[  227.960277][ T5741]  should_fail+0x6fb/0x860
[  227.960287][ T5741]  ? setup_fault_attr+0x3d0/0x3d0
[  227.960296][ T5741]  ? p9_fd_create+0x161/0x480
[  227.960304][ T5741]  should_failslab+0x5/0x20
[  227.960314][ T5741]  kmem_cache_alloc_trace+0x39/0x290
[  227.960324][ T5741]  p9_fd_create+0x161/0x480
[  227.960332][ T5741]  ? p9_client_create+0x789/0xb90
[  227.960340][ T5741]  ? p9_fd_create_unix+0x470/0x470
[  227.960348][ T5741]  ? __kmalloc_track_caller+0x20e/0x2c0
[  227.960357][ T5741]  ? kmemdup_nul+0x42/0xa0
[  227.960366][ T5741]  p9_client_create+0x81b/0xb90
[  227.960376][ T5741]  ? p9_parse_header+0x6b0/0x6b0
[  227.960384][ T5741]  ? __kasan_kmalloc+0x189/0x1c0
[  227.960394][ T5741]  ? __kmalloc_track_caller+0x20e/0x2c0
[  227.960402][ T5741]  ? vfs_get_tree+0x85/0x260
[  227.960412][ T5741]  v9fs_session_init+0x208/0x1a00
[  227.960424][ T5741]  ? v9fs_show_options+0x530/0x530
[  227.960436][ T5741]  ? v9fs_mount+0x5c/0x790
[  227.960443][ T5741]  ? v9fs_mount+0x5c/0x790
[  227.960452][ T5741]  ? kmem_cache_alloc_trace+0xc3/0x290
[  227.960461][ T5741]  v9fs_mount+0x7f/0x790
[  227.960470][ T5741]  ? cap_capable+0x23f/0x280
[  227.960481][ T5741]  legacy_get_tree+0xde/0x170
[  227.960490][ T5741]  ? iterate_incfs_dir+0x370/0x370
[  227.960498][ T5741]  vfs_get_tree+0x85/0x260
[  227.960508][ T5741]  do_mount+0x18ab/0x2660
[  227.960519][ T5741]  ? copy_mount_string+0x30/0x30
[  227.960527][ T5741]  ? page_fault+0x2f/0x40
[  227.960537][ T5741]  ? copy_mount_options+0x1e8/0x320
[  227.960546][ T5741]  ? copy_mount_options+0x293/0x320
[  227.960555][ T5741]  ksys_mount+0xc2/0xf0
[  227.960566][ T5741]  __x64_sys_mount+0xb1/0xc0
[  227.960576][ T5741]  do_syscall_64+0xcb/0x150
[  227.960586][ T5741]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  227.960594][ T5741] RIP: 0033:0x45e219
[  227.960603][ T5741] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  227.960608][ T5741] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  227.960618][ T5741] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  227.960623][ T5741] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  227.960628][ T5741] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  227.960633][ T5741] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f
[  227.960639][ T5741] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  228.026354][ T5748] FAULT_INJECTION: forcing a failure.
[  228.026354][ T5748] name failslab, interval 1, probability 0, space 0, times 0
[  228.026367][ T5748] CPU: 0 PID: 5748 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  228.026372][ T5748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  228.026374][ T5748] Call Trace:
[  228.026390][ T5748]  dump_stack+0x1dd/0x24e
[  228.026400][ T5748]  ? devkmsg_release+0x11c/0x11c
[  228.026410][ T5748]  ? show_regs_print_info+0x12/0x12
[  228.026424][ T5748]  should_fail+0x6fb/0x860
[  228.026434][ T5748]  ? setup_fault_attr+0x3d0/0x3d0
[  228.026446][ T5748]  ? p9_fcall_init+0x117/0x200
[  228.026454][ T5748]  should_failslab+0x5/0x20
[  228.026464][ T5748]  __kmalloc+0x5f/0x2d0
[  228.026475][ T5748]  p9_fcall_init+0x117/0x200
[  228.026485][ T5748]  p9_client_prepare_req+0x10d/0x7e0
[  228.026500][ T5748]  ? p9_client_create+0x81b/0xb90
[  228.026508][ T5748]  ? v9fs_session_init+0x208/0x1a00
[  228.026526][ T5748]  ? v9fs_mount+0x7f/0x790
[  228.026536][ T5748]  p9_client_rpc+0x12c/0xb80
[  228.026550][ T5748]  ? _raw_spin_lock_irqsave+0xf8/0x210
[  228.026559][ T5748]  ? p9_fid_create+0x260/0x260
[  228.026570][ T5748]  ? __fget+0x37c/0x3c0
[  228.026580][ T5748]  ? add_wait_queue+0x77/0x130
[  228.026590][ T5748]  ? _raw_spin_unlock_irqrestore+0x57/0x80
[  228.026599][ T5748]  p9_client_version+0x183/0x700
[  228.026608][ T5748]  ? p9_conn_create+0x4a6/0x520
[  228.026617][ T5748]  ? p9_fd_create+0x391/0x480
[  228.026625][ T5748]  ? p9_client_create+0xb90/0xb90
[  228.026633][ T5748]  ? p9_fd_create_unix+0x470/0x470
[  228.026643][ T5748]  ? __kmalloc_track_caller+0x20e/0x2c0
[  228.026652][ T5748]  ? kmemdup_nul+0x42/0xa0
[  228.026662][ T5748]  p9_client_create+0x8e5/0xb90
[  228.026673][ T5748]  ? p9_parse_header+0x6b0/0x6b0
[  228.026681][ T5748]  ? __kasan_kmalloc+0x189/0x1c0
[  228.026691][ T5748]  ? __kmalloc_track_caller+0x20e/0x2c0
[  228.026700][ T5748]  ? vfs_get_tree+0x85/0x260
[  228.026710][ T5748]  v9fs_session_init+0x208/0x1a00
[  228.026723][ T5748]  ? v9fs_show_options+0x530/0x530
[  228.026739][ T5748]  ? v9fs_mount+0x5c/0x790
[  228.026749][ T5748]  ? kmem_cache_alloc_trace+0xc3/0x290
[  228.026760][ T5748]  ? legacy_init_fs_context+0x4d/0xc0
[  228.026768][ T5748]  v9fs_mount+0x7f/0x790
[  228.026778][ T5748]  ? cap_capable+0x23f/0x280
[  228.026788][ T5748]  legacy_get_tree+0xde/0x170
[  228.026798][ T5748]  ? iterate_incfs_dir+0x370/0x370
[  228.026809][ T5748]  vfs_get_tree+0x85/0x260
[  228.026820][ T5748]  do_mount+0x18ab/0x2660
[  228.026832][ T5748]  ? copy_mount_string+0x30/0x30
[  228.026840][ T5748]  ? page_fault+0x2f/0x40
[  228.026852][ T5748]  ? copy_mount_options+0x1e8/0x320
[  228.026862][ T5748]  ? copy_mount_options+0x293/0x320
[  228.026872][ T5748]  ksys_mount+0xc2/0xf0
[  228.026885][ T5748]  __x64_sys_mount+0xb1/0xc0
[  228.026897][ T5748]  do_syscall_64+0xcb/0x150
[  228.026906][ T5748]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  228.026915][ T5748] RIP: 0033:0x45e219
[  228.026926][ T5748] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  228.026931][ T5748] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  228.026941][ T5748] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  228.026947][ T5748] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  228.026953][ T5748] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  228.026958][ T5748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010
[  228.026965][ T5748] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  228.117301][ T5752] FAULT_INJECTION: forcing a failure.
[  228.117301][ T5752] name failslab, interval 1, probability 0, space 0, times 0
[  228.117314][ T5752] CPU: 1 PID: 5752 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  228.117319][ T5752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  228.117322][ T5752] Call Trace:
[  228.117339][ T5752]  dump_stack+0x1dd/0x24e
[  228.117351][ T5752]  ? devkmsg_release+0x11c/0x11c
[  228.117361][ T5752]  ? show_regs_print_info+0x12/0x12
[  228.117374][ T5752]  should_fail+0x6fb/0x860
[  228.117384][ T5752]  ? setup_fault_attr+0x3d0/0x3d0
[  228.117405][ T5752]  ? p9_fcall_init+0x117/0x200
[  228.117414][ T5752]  should_failslab+0x5/0x20
[  228.117425][ T5752]  __kmalloc+0x5f/0x2d0
[  228.117433][ T5752]  ? p9_fcall_init+0x117/0x200
[  228.117442][ T5752]  p9_fcall_init+0x117/0x200
[  228.117452][ T5752]  p9_client_prepare_req+0x159/0x7e0
[  228.117461][ T5752]  ? p9_client_create+0x81b/0xb90
[  228.117469][ T5752]  ? v9fs_session_init+0x208/0x1a00
[  228.117478][ T5752]  p9_client_rpc+0x12c/0xb80
[  228.117493][ T5752]  ? _raw_spin_lock_irqsave+0xf8/0x210
[  228.117502][ T5752]  ? p9_fid_create+0x260/0x260
[  228.117512][ T5752]  ? __fget+0x37c/0x3c0
[  228.117523][ T5752]  ? add_wait_queue+0x77/0x130
[  228.117533][ T5752]  ? _raw_spin_unlock_irqrestore+0x57/0x80
[  228.117550][ T5752]  p9_client_version+0x183/0x700
[  228.117560][ T5752]  ? p9_conn_create+0x4a6/0x520
[  228.117570][ T5752]  ? p9_fd_create+0x391/0x480
[  228.117578][ T5752]  ? p9_client_create+0xb90/0xb90
[  228.117585][ T5752]  ? p9_fd_create_unix+0x470/0x470
[  228.117594][ T5752]  ? __kmalloc_track_caller+0x20e/0x2c0
[  228.117604][ T5752]  ? kmemdup_nul+0x42/0xa0
[  228.117613][ T5752]  p9_client_create+0x8e5/0xb90
[  228.117623][ T5752]  ? p9_parse_header+0x6b0/0x6b0
[  228.117633][ T5752]  ? __kasan_kmalloc+0x189/0x1c0
[  228.117643][ T5752]  ? __kmalloc_track_caller+0x20e/0x2c0
[  228.117652][ T5752]  ? vfs_get_tree+0x85/0x260
[  228.117662][ T5752]  v9fs_session_init+0x208/0x1a00
[  228.117675][ T5752]  ? v9fs_show_options+0x530/0x530
[  228.117687][ T5752]  ? v9fs_mount+0x5c/0x790
[  228.117697][ T5752]  ? kmem_cache_alloc_trace+0xc3/0x290
[  228.117708][ T5752]  ? legacy_init_fs_context+0x4d/0xc0
[  228.117717][ T5752]  v9fs_mount+0x7f/0x790
[  228.117728][ T5752]  ? cap_capable+0x23f/0x280
[  228.117738][ T5752]  legacy_get_tree+0xde/0x170
[  228.117748][ T5752]  ? iterate_incfs_dir+0x370/0x370
[  228.117757][ T5752]  vfs_get_tree+0x85/0x260
[  228.117769][ T5752]  do_mount+0x18ab/0x2660
[  228.117781][ T5752]  ? copy_mount_string+0x30/0x30
[  228.117789][ T5752]  ? page_fault+0x2f/0x40
[  228.117801][ T5752]  ? copy_mount_options+0x1e8/0x320
[  228.117811][ T5752]  ? copy_mount_options+0x293/0x320
[  228.117821][ T5752]  ksys_mount+0xc2/0xf0
[  228.117831][ T5752]  __x64_sys_mount+0xb1/0xc0
[  228.117841][ T5752]  do_syscall_64+0xcb/0x150
[  228.117852][ T5752]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  228.117861][ T5752] RIP: 0033:0x45e219
[  228.117872][ T5752] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  228.117877][ T5752] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  228.117887][ T5752] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  228.117893][ T5752] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  228.117899][ T5752] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  228.117903][ T5752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011
[  228.117909][ T5752] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  228.211296][ T5754] FAULT_INJECTION: forcing a failure.
[  228.211296][ T5754] name failslab, interval 1, probability 0, space 0, times 0
[  228.211310][ T5754] CPU: 0 PID: 5754 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  228.211314][ T5754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  228.211317][ T5754] Call Trace:
[  228.211335][ T5754]  dump_stack+0x1dd/0x24e
[  228.211345][ T5754]  ? devkmsg_release+0x11c/0x11c
[  228.211356][ T5754]  ? stack_trace_save+0x120/0x1f0
[  228.211365][ T5754]  ? show_regs_print_info+0x12/0x12
[  228.211374][ T5754]  ? stack_trace_snprint+0x150/0x150
[  228.211382][ T5754]  ? preempt_count_add+0x66/0x150
[  228.211391][ T5754]  ? unwind_next_frame+0x1aa9/0x1f30
[  228.211402][ T5754]  should_fail+0x6fb/0x860
[  228.211412][ T5754]  ? setup_fault_attr+0x3d0/0x3d0
[  228.211422][ T5754]  ? __kmalloc+0xe7/0x2d0
[  228.211431][ T5754]  ? p9_fcall_init+0x117/0x200
[  228.211439][ T5754]  ? p9_client_prepare_req+0x159/0x7e0
[  228.211446][ T5754]  ? p9_client_rpc+0x12c/0xb80
[  228.211452][ T5754]  ? p9_client_version+0x183/0x700
[  228.211460][ T5754]  ? v9fs_session_init+0x208/0x1a00
[  228.211485][ T5754]  ? v9fs_mount+0x7f/0x790
[  228.211496][ T5754]  ? legacy_get_tree+0xde/0x170
[  228.211504][ T5754]  ? vfs_get_tree+0x85/0x260
[  228.211513][ T5754]  ? do_mount+0x18ab/0x2660
[  228.211523][ T5754]  ? radix_tree_node_alloc+0x194/0x3a0
[  228.211532][ T5754]  should_failslab+0x5/0x20
[  228.211541][ T5754]  kmem_cache_alloc+0x36/0x270
[  228.211551][ T5754]  radix_tree_node_alloc+0x194/0x3a0
[  228.211561][ T5754]  idr_get_free+0x2aa/0x880
[  228.211572][ T5754]  idr_alloc+0x19f/0x300
[  228.211581][ T5754]  ? debug_smp_processor_id+0x20/0x20
[  228.211591][ T5754]  ? idr_alloc_u32+0x300/0x300
[  228.211602][ T5754]  ? _raw_spin_lock_irq+0xa4/0x1b0
[  228.211611][ T5754]  ? __radix_tree_preload+0x2c5/0x310
[  228.211621][ T5754]  p9_client_prepare_req+0x396/0x7e0
[  228.211628][ T5754]  ? p9_client_create+0x81b/0xb90
[  228.211634][ T5754]  ? v9fs_session_init+0x208/0x1a00
[  228.211644][ T5754]  p9_client_rpc+0x12c/0xb80
[  228.211655][ T5754]  ? _raw_spin_lock_irqsave+0xf8/0x210
[  228.211663][ T5754]  ? p9_fid_create+0x260/0x260
[  228.211673][ T5754]  ? __fget+0x37c/0x3c0
[  228.211683][ T5754]  ? add_wait_queue+0x77/0x130
[  228.211693][ T5754]  ? _raw_spin_unlock_irqrestore+0x57/0x80
[  228.211702][ T5754]  p9_client_version+0x183/0x700
[  228.211711][ T5754]  ? p9_conn_create+0x4a6/0x520
[  228.211720][ T5754]  ? p9_fd_create+0x391/0x480
[  228.211729][ T5754]  ? p9_client_create+0xb90/0xb90
[  228.211738][ T5754]  ? p9_fd_create_unix+0x470/0x470
[  228.211746][ T5754]  ? __kmalloc_track_caller+0x20e/0x2c0
[  228.211757][ T5754]  ? kmemdup_nul+0x42/0xa0
[  228.211768][ T5754]  p9_client_create+0x8e5/0xb90
[  228.211791][ T5754]  ? p9_parse_header+0x6b0/0x6b0
[  228.211807][ T5754]  ? __kasan_kmalloc+0x189/0x1c0
[  228.211819][ T5754]  ? __kmalloc_track_caller+0x20e/0x2c0
[  228.211828][ T5754]  ? vfs_get_tree+0x85/0x260
[  228.211838][ T5754]  v9fs_session_init+0x208/0x1a00
[  228.211859][ T5754]  ? v9fs_show_options+0x530/0x530
[  228.211872][ T5754]  ? v9fs_mount+0x5c/0x790
[  228.211882][ T5754]  ? kmem_cache_alloc_trace+0xc3/0x290
[  228.211893][ T5754]  ? legacy_init_fs_context+0x4d/0xc0
[  228.211903][ T5754]  v9fs_mount+0x7f/0x790
[  228.211913][ T5754]  ? cap_capable+0x23f/0x280
[  228.211924][ T5754]  legacy_get_tree+0xde/0x170
[  228.211933][ T5754]  ? iterate_incfs_dir+0x370/0x370
[  228.211942][ T5754]  vfs_get_tree+0x85/0x260
[  228.211953][ T5754]  do_mount+0x18ab/0x2660
[  228.211966][ T5754]  ? copy_mount_string+0x30/0x30
[  228.211973][ T5754]  ? page_fault+0x2f/0x40
[  228.211987][ T5754]  ? copy_mount_options+0x1e8/0x320
[  228.211996][ T5754]  ? copy_mount_options+0x293/0x320
[  228.212006][ T5754]  ksys_mount+0xc2/0xf0
[  228.212016][ T5754]  __x64_sys_mount+0xb1/0xc0
[  228.212027][ T5754]  do_syscall_64+0xcb/0x150
[  228.212037][ T5754]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  228.212055][ T5754] RIP: 0033:0x45e219
[  228.212065][ T5754] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  228.212071][ T5754] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  228.212082][ T5754] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  228.212089][ T5754] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  228.212096][ T5754] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  228.212102][ T5754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012
[  228.212108][ T5754] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  228.322442][ T5760] FAULT_INJECTION: forcing a failure.
[  228.322442][ T5760] name failslab, interval 1, probability 0, space 0, times 0
[  229.764260][ T5760] CPU: 0 PID: 5760 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  229.764265][ T5760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  229.764268][ T5760] Call Trace:
[  229.764285][ T5760]  dump_stack+0x1dd/0x24e
[  229.764301][ T5760]  ? devkmsg_release+0x11c/0x11c
[  229.797684][ T5760]  ? show_regs_print_info+0x12/0x12
[  229.797697][ T5760]  should_fail+0x6fb/0x860
[  229.797707][ T5760]  ? setup_fault_attr+0x3d0/0x3d0
[  229.797723][ T5760]  ? do_mount+0x18ab/0x2660
[  229.816809][ T5760]  ? radix_tree_node_alloc+0x194/0x3a0
[  229.816819][ T5760]  should_failslab+0x5/0x20
[  229.816829][ T5760]  kmem_cache_alloc+0x36/0x270
[  229.816838][ T5760]  radix_tree_node_alloc+0x194/0x3a0
[  229.816852][ T5760]  idr_get_free+0x2aa/0x880
[  229.841257][ T5760]  idr_alloc+0x19f/0x300
[  229.841268][ T5760]  ? debug_smp_processor_id+0x20/0x20
[  229.841277][ T5760]  ? idr_alloc_u32+0x300/0x300
[  229.841287][ T5760]  ? _raw_spin_lock_irq+0xa4/0x1b0
[  229.841297][ T5760]  ? __radix_tree_preload+0x2c5/0x310
[  229.841308][ T5760]  p9_client_prepare_req+0x396/0x7e0
[  229.841316][ T5760]  ? p9_client_create+0x81b/0xb90
[  229.841324][ T5760]  ? v9fs_session_init+0x208/0x1a00
[  229.841337][ T5760]  p9_client_rpc+0x12c/0xb80
[  229.886209][ T5760]  ? _raw_spin_lock_irqsave+0xf8/0x210
[  229.886219][ T5760]  ? p9_fid_create+0x260/0x260
[  229.886235][ T5760]  ? __fget+0x37c/0x3c0
[  229.900540][ T5760]  ? add_wait_queue+0x77/0x130
[  229.900552][ T5760]  ? _raw_spin_unlock_irqrestore+0x57/0x80
[  229.900559][ T5760]  p9_client_version+0x183/0x700
[  229.900586][ T5760]  ? p9_conn_create+0x4a6/0x520
[  229.920872][ T5760]  ? p9_fd_create+0x391/0x480
[  229.920882][ T5760]  ? p9_client_create+0xb90/0xb90
[  229.920889][ T5760]  ? p9_fd_create_unix+0x470/0x470
[  229.920900][ T5760]  ? __kmalloc_track_caller+0x20e/0x2c0
[  229.920907][ T5760]  ? kmemdup_nul+0x42/0xa0
[  229.920921][ T5760]  p9_client_create+0x8e5/0xb90
[  229.950418][ T5760]  ? p9_parse_header+0x6b0/0x6b0
[  229.950427][ T5760]  ? __kasan_kmalloc+0x189/0x1c0
[  229.950439][ T5760]  ? __kmalloc_track_caller+0x20e/0x2c0
[  229.950448][ T5760]  ? vfs_get_tree+0x85/0x260
[  229.950459][ T5760]  v9fs_session_init+0x208/0x1a00
[  229.950473][ T5760]  ? v9fs_show_options+0x530/0x530
[  229.980488][ T5760]  ? v9fs_mount+0x5c/0x790
[  229.980502][ T5760]  ? kmem_cache_alloc_trace+0xc3/0x290
[  229.980513][ T5760]  ? legacy_init_fs_context+0x4d/0xc0
[  229.980522][ T5760]  v9fs_mount+0x7f/0x790
[  229.980532][ T5760]  ? cap_capable+0x23f/0x280
[  229.980541][ T5760]  legacy_get_tree+0xde/0x170
[  229.980550][ T5760]  ? iterate_incfs_dir+0x370/0x370
[  229.980559][ T5760]  vfs_get_tree+0x85/0x260
[  229.980570][ T5760]  do_mount+0x18ab/0x2660
[  229.980581][ T5760]  ? copy_mount_string+0x30/0x30
[  229.980589][ T5760]  ? page_fault+0x2f/0x40
[  229.980600][ T5760]  ? copy_mount_options+0x1e8/0x320
[  229.980608][ T5760]  ? copy_mount_options+0x293/0x320
[  229.980617][ T5760]  ksys_mount+0xc2/0xf0
[  229.980625][ T5760]  __x64_sys_mount+0xb1/0xc0
[  229.980640][ T5760]  do_syscall_64+0xcb/0x150
[  230.056022][ T5760]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  230.056031][ T5760] RIP: 0033:0x45e219
[  230.056040][ T5760] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  230.056053][ T5760] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  230.093779][ T5760] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  230.093784][ T5760] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  230.093789][ T5760] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
21:38:53 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004103)

21:38:53 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)

21:38:53 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x400000000000000, 0x2e0)

[  230.093795][ T5760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013
[  230.093800][ T5760] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
21:38:53 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

21:38:53 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0xfeffffff00000000, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:53 executing program 4 (fault-call:3 fault-nth:20):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  230.226115][ T5781] FAULT_INJECTION: forcing a failure.
[  230.226115][ T5781] name failslab, interval 1, probability 0, space 0, times 0
[  230.238732][ T5781] CPU: 1 PID: 5781 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  230.248795][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  230.258820][ T5781] Call Trace:
[  230.262095][ T5781]  dump_stack+0x1dd/0x24e
[  230.266407][ T5781]  ? devkmsg_release+0x11c/0x11c
[  230.271338][ T5781]  ? show_regs_print_info+0x12/0x12
[  230.276546][ T5781]  should_fail+0x6fb/0x860
[  230.280957][ T5781]  ? setup_fault_attr+0x3d0/0x3d0
[  230.285956][ T5781]  ? do_mount+0x18ab/0x2660
[  230.290431][ T5781]  ? radix_tree_node_alloc+0x194/0x3a0
[  230.295867][ T5781]  should_failslab+0x5/0x20
[  230.300348][ T5781]  kmem_cache_alloc+0x36/0x270
[  230.305084][ T5781]  radix_tree_node_alloc+0x194/0x3a0
[  230.310344][ T5781]  idr_get_free+0x2aa/0x880
[  230.314824][ T5781]  idr_alloc+0x19f/0x300
[  230.319042][ T5781]  ? debug_smp_processor_id+0x20/0x20
[  230.324415][ T5781]  ? idr_alloc_u32+0x300/0x300
[  230.329171][ T5781]  ? _raw_spin_lock_irq+0xa4/0x1b0
[  230.334254][ T5781]  ? __radix_tree_preload+0x2c5/0x310
[  230.339598][ T5781]  p9_client_prepare_req+0x396/0x7e0
[  230.345135][ T5781]  ? p9_client_create+0x81b/0xb90
[  230.350145][ T5781]  ? v9fs_session_init+0x208/0x1a00
[  230.355313][ T5781]  p9_client_rpc+0x12c/0xb80
[  230.359877][ T5781]  ? _raw_spin_lock_irqsave+0xf8/0x210
[  230.365305][ T5781]  ? p9_fid_create+0x260/0x260
[  230.370040][ T5781]  ? __fget+0x37c/0x3c0
[  230.374184][ T5781]  ? add_wait_queue+0x77/0x130
[  230.378933][ T5781]  ? _raw_spin_unlock_irqrestore+0x57/0x80
[  230.384719][ T5781]  p9_client_version+0x183/0x700
[  230.389626][ T5781]  ? p9_conn_create+0x4a6/0x520
[  230.394453][ T5781]  ? p9_fd_create+0x391/0x480
[  230.399125][ T5781]  ? p9_client_create+0xb90/0xb90
[  230.404209][ T5781]  ? p9_fd_create_unix+0x470/0x470
[  230.409473][ T5781]  ? __kmalloc_track_caller+0x20e/0x2c0
[  230.414990][ T5781]  ? kmemdup_nul+0x42/0xa0
[  230.419396][ T5781]  p9_client_create+0x8e5/0xb90
[  230.424219][ T5781]  ? p9_parse_header+0x6b0/0x6b0
[  230.429138][ T5781]  ? __kasan_kmalloc+0x189/0x1c0
[  230.434048][ T5781]  ? __kmalloc_track_caller+0x20e/0x2c0
[  230.439563][ T5781]  ? vfs_get_tree+0x85/0x260
[  230.444128][ T5781]  v9fs_session_init+0x208/0x1a00
[  230.449125][ T5781]  ? v9fs_show_options+0x530/0x530
[  230.454222][ T5781]  ? v9fs_mount+0x5c/0x790
[  230.458624][ T5781]  ? kmem_cache_alloc_trace+0xc3/0x290
[  230.464053][ T5781]  ? legacy_init_fs_context+0x4d/0xc0
[  230.469395][ T5781]  v9fs_mount+0x7f/0x790
[  230.473608][ T5781]  ? cap_capable+0x23f/0x280
[  230.478169][ T5781]  legacy_get_tree+0xde/0x170
[  230.482815][ T5781]  ? iterate_incfs_dir+0x370/0x370
[  230.487896][ T5781]  vfs_get_tree+0x85/0x260
[  230.492284][ T5781]  do_mount+0x18ab/0x2660
[  230.496605][ T5781]  ? copy_mount_string+0x30/0x30
[  230.501516][ T5781]  ? page_fault+0x2f/0x40
[  230.505826][ T5781]  ? copy_mount_options+0x1e8/0x320
[  230.511019][ T5781]  ? copy_mount_options+0x293/0x320
[  230.516193][ T5781]  ksys_mount+0xc2/0xf0
[  230.520340][ T5781]  __x64_sys_mount+0xb1/0xc0
[  230.524915][ T5781]  do_syscall_64+0xcb/0x150
[  230.529402][ T5781]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  230.535263][ T5781] RIP: 0033:0x45e219
[  230.539127][ T5781] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  230.558700][ T5781] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  230.567177][ T5781] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  230.575220][ T5781] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  230.583176][ T5781] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  230.591119][ T5781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014
[  230.599065][ T5781] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
21:38:54 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x7ffff000)

21:38:54 executing program 4 (fault-call:3 fault-nth:21):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  230.763231][ T5800] FAULT_INJECTION: forcing a failure.
[  230.763231][ T5800] name failslab, interval 1, probability 0, space 0, times 0
[  230.776439][ T5800] CPU: 0 PID: 5800 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  230.786495][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  230.796556][ T5800] Call Trace:
[  230.799849][ T5800]  dump_stack+0x1dd/0x24e
[  230.804158][ T5800]  ? devkmsg_release+0x11c/0x11c
[  230.809075][ T5800]  ? show_regs_print_info+0x12/0x12
[  230.814254][ T5800]  ? preempt_schedule+0x168/0x190
[  230.819272][ T5800]  ? schedule_preempt_disabled+0x20/0x20
[  230.824894][ T5800]  should_fail+0x6fb/0x860
[  230.829296][ T5800]  ? setup_fault_attr+0x3d0/0x3d0
[  230.834355][ T5800]  ? p9_check_errors+0x583/0x8b0
[  230.839293][ T5800]  ? p9pdu_readf+0x1d50/0x2d40
[  230.844034][ T5800]  should_failslab+0x5/0x20
[  230.848519][ T5800]  __kmalloc+0x5f/0x2d0
[  230.852654][ T5800]  ? p9pdu_readf+0x14a7/0x2d40
[  230.857399][ T5800]  p9pdu_readf+0x1d50/0x2d40
[  230.861988][ T5800]  ? p9_client_rpc+0xa1a/0xb80
[  230.866740][ T5800]  ? p9_check_errors+0x45c/0x8b0
[  230.871664][ T5800]  ? p9pdu_writef+0x120/0x120
[  230.876326][ T5800]  ? add_wait_queue+0x77/0x130
[  230.881070][ T5800]  ? _raw_spin_unlock_irqrestore+0x57/0x80
[  230.886855][ T5800]  p9_client_version+0x20b/0x700
[  230.891773][ T5800]  ? p9_conn_create+0x4a6/0x520
[  230.896603][ T5800]  ? p9_client_create+0xb90/0xb90
[  230.901605][ T5800]  ? p9_fd_create_unix+0x470/0x470
[  230.906708][ T5800]  ? __kmalloc_track_caller+0x20e/0x2c0
[  230.912234][ T5800]  ? kmemdup_nul+0x42/0xa0
[  230.916628][ T5800]  p9_client_create+0x8e5/0xb90
[  230.921461][ T5800]  ? p9_parse_header+0x6b0/0x6b0
[  230.926377][ T5800]  ? __kasan_kmalloc+0x189/0x1c0
[  230.931295][ T5800]  ? __kmalloc_track_caller+0x20e/0x2c0
[  230.936817][ T5800]  ? vfs_get_tree+0x85/0x260
[  230.941387][ T5800]  v9fs_session_init+0x208/0x1a00
[  230.946393][ T5800]  ? v9fs_show_options+0x530/0x530
[  230.951495][ T5800]  ? v9fs_mount+0x5c/0x790
[  230.955903][ T5800]  ? kmem_cache_alloc_trace+0xc3/0x290
[  230.961339][ T5800]  ? legacy_init_fs_context+0x4d/0xc0
[  230.966689][ T5800]  v9fs_mount+0x7f/0x790
[  230.970930][ T5800]  ? cap_capable+0x23f/0x280
[  230.975537][ T5800]  legacy_get_tree+0xde/0x170
[  230.980214][ T5800]  ? iterate_incfs_dir+0x370/0x370
[  230.985305][ T5800]  vfs_get_tree+0x85/0x260
[  230.989703][ T5800]  do_mount+0x18ab/0x2660
[  230.994015][ T5800]  ? copy_mount_string+0x30/0x30
[  230.998945][ T5800]  ? page_fault+0x2f/0x40
[  231.003602][ T5800]  ? copy_mount_options+0x1e8/0x320
[  231.008790][ T5800]  ? copy_mount_options+0x293/0x320
[  231.013966][ T5800]  ksys_mount+0xc2/0xf0
[  231.018103][ T5800]  __x64_sys_mount+0xb1/0xc0
[  231.022682][ T5800]  do_syscall_64+0xcb/0x150
[  231.027182][ T5800]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  231.033066][ T5800] RIP: 0033:0x45e219
[  231.036940][ T5800] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
21:38:54 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x800000000000000, 0x2e0)

[  231.056522][ T5800] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  231.064920][ T5800] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  231.072874][ T5800] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  231.080823][ T5800] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  231.088784][ T5800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  231.096733][ T5800] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
21:38:54 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0xffffffff00000000, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:54 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004102)

21:38:54 executing program 4 (fault-call:3 fault-nth:22):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  231.195689][ T5819] FAULT_INJECTION: forcing a failure.
[  231.195689][ T5819] name failslab, interval 1, probability 0, space 0, times 0
[  231.221522][ T5819] CPU: 1 PID: 5819 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  231.231587][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  231.241629][ T5819] Call Trace:
[  231.244899][ T5819]  dump_stack+0x1dd/0x24e
[  231.249201][ T5819]  ? devkmsg_release+0x11c/0x11c
[  231.254117][ T5819]  ? show_regs_print_info+0x12/0x12
[  231.259287][ T5819]  ? kmem_cache_alloc+0x1e0/0x270
[  231.264282][ T5819]  ? kmem_cache_create_usercopy+0x145/0x1d0
[  231.270174][ T5819]  ? p9_client_create+0x9ff/0xb90
[  231.275225][ T5819]  ? v9fs_session_init+0x208/0x1a00
[  231.280442][ T5819]  ? legacy_get_tree+0xde/0x170
[  231.285266][ T5819]  ? vfs_get_tree+0x85/0x260
[  231.289845][ T5819]  ? do_mount+0x18ab/0x2660
[  231.294432][ T5819]  ? ksys_mount+0xc2/0xf0
[  231.298733][ T5819]  should_fail+0x6fb/0x860
[  231.303158][ T5819]  ? setup_fault_attr+0x3d0/0x3d0
[  231.308875][ T5819]  ? _raw_spin_lock_irqsave+0xf8/0x210
[  231.314320][ T5819]  ? _raw_spin_lock+0x1b0/0x1b0
[  231.319147][ T5819]  ? cache_random_seq_create+0x7f/0x1c0
[  231.324680][ T5819]  should_failslab+0x5/0x20
[  231.329165][ T5819]  __kmalloc+0x5f/0x2d0
[  231.333292][ T5819]  cache_random_seq_create+0x7f/0x1c0
[  231.338636][ T5819]  __kmem_cache_create+0x497/0x6f0
[  231.343719][ T5819]  ? __should_failslab+0x92/0x150
[  231.348711][ T5819]  ? create_cache+0x3b/0x1f0
[  231.353278][ T5819]  ? kmem_cache_alloc+0x1e0/0x270
[  231.358289][ T5819]  create_cache+0x156/0x1f0
[  231.362775][ T5819]  kmem_cache_create_usercopy+0x145/0x1d0
[  231.368476][ T5819]  p9_client_create+0x9ff/0xb90
[  231.373305][ T5819]  ? p9_parse_header+0x6b0/0x6b0
[  231.378213][ T5819]  ? __kasan_kmalloc+0x189/0x1c0
[  231.383123][ T5819]  ? __kmalloc_track_caller+0x20e/0x2c0
[  231.388638][ T5819]  ? vfs_get_tree+0x85/0x260
[  231.393206][ T5819]  v9fs_session_init+0x208/0x1a00
[  231.398205][ T5819]  ? v9fs_show_options+0x530/0x530
[  231.403287][ T5819]  ? v9fs_mount+0x5c/0x790
[  231.407674][ T5819]  ? kmem_cache_alloc_trace+0xc3/0x290
[  231.413104][ T5819]  ? legacy_init_fs_context+0x4d/0xc0
[  231.418446][ T5819]  v9fs_mount+0x7f/0x790
[  231.422661][ T5819]  ? cap_capable+0x23f/0x280
[  231.428190][ T5819]  legacy_get_tree+0xde/0x170
[  231.432856][ T5819]  ? iterate_incfs_dir+0x370/0x370
[  231.437956][ T5819]  vfs_get_tree+0x85/0x260
[  231.442360][ T5819]  do_mount+0x18ab/0x2660
[  231.446670][ T5819]  ? copy_mount_string+0x30/0x30
[  231.451585][ T5819]  ? page_fault+0x2f/0x40
[  231.455898][ T5819]  ? copy_mount_options+0x1e8/0x320
[  231.461068][ T5819]  ? copy_mount_options+0x293/0x320
[  231.466251][ T5819]  ksys_mount+0xc2/0xf0
[  231.470380][ T5819]  __x64_sys_mount+0xb1/0xc0
[  231.474941][ T5819]  do_syscall_64+0xcb/0x150
[  231.479426][ T5819]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  231.485287][ T5819] RIP: 0033:0x45e219
[  231.489150][ T5819] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  231.508728][ T5819] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  231.517109][ T5819] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  231.525051][ T5819] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  231.532997][ T5819] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  231.540947][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016
[  231.548887][ T5819] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  231.558200][ T5819] SLUB: Unable to initialize free list for 9p-fcall-cache
[  231.565462][ T5819] kmem_cache_create(9p-fcall-cache) failed with error -22
[  231.572886][ T5819] CPU: 0 PID: 5819 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  231.582941][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  231.592995][ T5819] Call Trace:
[  231.596278][ T5819]  dump_stack+0x1dd/0x24e
[  231.600594][ T5819]  ? devkmsg_release+0x11c/0x11c
[  231.605520][ T5819]  ? show_regs_print_info+0x12/0x12
[  231.610702][ T5819]  ? create_cache+0x1cc/0x1f0
[  231.615359][ T5819]  kmem_cache_create_usercopy+0x8c/0x1d0
[  231.620969][ T5819]  p9_client_create+0x9ff/0xb90
[  231.625812][ T5819]  ? p9_parse_header+0x6b0/0x6b0
[  231.630728][ T5819]  ? __kasan_kmalloc+0x189/0x1c0
[  231.635646][ T5819]  ? __kmalloc_track_caller+0x20e/0x2c0
[  231.641171][ T5819]  ? vfs_get_tree+0x85/0x260
[  231.645736][ T5819]  v9fs_session_init+0x208/0x1a00
[  231.650739][ T5819]  ? v9fs_show_options+0x530/0x530
[  231.655836][ T5819]  ? v9fs_mount+0x5c/0x790
[  231.660232][ T5819]  ? kmem_cache_alloc_trace+0xc3/0x290
[  231.665672][ T5819]  ? legacy_init_fs_context+0x4d/0xc0
[  231.671024][ T5819]  v9fs_mount+0x7f/0x790
[  231.675245][ T5819]  ? cap_capable+0x23f/0x280
[  231.679815][ T5819]  legacy_get_tree+0xde/0x170
[  231.684470][ T5819]  ? iterate_incfs_dir+0x370/0x370
[  231.689560][ T5819]  vfs_get_tree+0x85/0x260
[  231.693965][ T5819]  do_mount+0x18ab/0x2660
[  231.698273][ T5819]  ? copy_mount_string+0x30/0x30
[  231.703184][ T5819]  ? page_fault+0x2f/0x40
[  231.707520][ T5819]  ? copy_mount_options+0x1e8/0x320
[  231.712698][ T5819]  ? copy_mount_options+0x293/0x320
[  231.717871][ T5819]  ksys_mount+0xc2/0xf0
[  231.722026][ T5819]  __x64_sys_mount+0xb1/0xc0
[  231.726768][ T5819]  do_syscall_64+0xcb/0x150
[  231.731248][ T5819]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  231.737115][ T5819] RIP: 0033:0x45e219
[  231.740987][ T5819] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  231.760565][ T5819] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  231.768951][ T5819] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  231.776899][ T5819] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  231.784847][ T5819] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
21:38:55 executing program 4 (fault-call:3 fault-nth:23):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  231.792794][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016
[  231.800740][ T5819] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  231.835814][ T5827] FAULT_INJECTION: forcing a failure.
[  231.835814][ T5827] name failslab, interval 1, probability 0, space 0, times 0
[  231.851527][ T5827] CPU: 0 PID: 5827 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  231.861575][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  231.871627][ T5827] Call Trace:
[  231.874935][ T5827]  dump_stack+0x1dd/0x24e
[  231.879251][ T5827]  ? devkmsg_release+0x11c/0x11c
[  231.884194][ T5827]  ? show_regs_print_info+0x12/0x12
[  231.889379][ T5827]  ? kmem_cache_alloc+0x1e0/0x270
[  231.894384][ T5827]  ? kmem_cache_create_usercopy+0x145/0x1d0
[  231.900253][ T5827]  ? p9_client_create+0x9ff/0xb90
[  231.905254][ T5827]  ? v9fs_session_init+0x208/0x1a00
[  231.910430][ T5827]  ? legacy_get_tree+0xde/0x170
[  231.915276][ T5827]  ? vfs_get_tree+0x85/0x260
[  231.919873][ T5827]  ? do_mount+0x18ab/0x2660
[  231.924365][ T5827]  ? ksys_mount+0xc2/0xf0
[  231.928675][ T5827]  should_fail+0x6fb/0x860
[  231.933070][ T5827]  ? setup_fault_attr+0x3d0/0x3d0
[  231.938074][ T5827]  ? _raw_spin_lock_irqsave+0xf8/0x210
[  231.943511][ T5827]  ? _raw_spin_lock+0x1b0/0x1b0
[  231.948340][ T5827]  ? cache_random_seq_create+0x7f/0x1c0
[  231.953859][ T5827]  should_failslab+0x5/0x20
[  231.958342][ T5827]  __kmalloc+0x5f/0x2d0
[  231.962476][ T5827]  cache_random_seq_create+0x7f/0x1c0
[  231.967911][ T5827]  __kmem_cache_create+0x497/0x6f0
[  231.973014][ T5827]  ? __should_failslab+0x92/0x150
[  231.978367][ T5827]  ? create_cache+0x3b/0x1f0
[  231.982949][ T5827]  ? kmem_cache_alloc+0x1e0/0x270
[  231.987952][ T5827]  create_cache+0x156/0x1f0
[  231.992455][ T5827]  kmem_cache_create_usercopy+0x145/0x1d0
[  231.998153][ T5827]  p9_client_create+0x9ff/0xb90
[  232.002981][ T5827]  ? p9_parse_header+0x6b0/0x6b0
[  232.007894][ T5827]  ? __kasan_kmalloc+0x189/0x1c0
[  232.012809][ T5827]  ? __kmalloc_track_caller+0x20e/0x2c0
[  232.018330][ T5827]  ? vfs_get_tree+0x85/0x260
[  232.022901][ T5827]  v9fs_session_init+0x208/0x1a00
[  232.027907][ T5827]  ? v9fs_show_options+0x530/0x530
[  232.033009][ T5827]  ? v9fs_mount+0x5c/0x790
[  232.037419][ T5827]  ? v9fs_mount+0x5c/0x790
[  232.041812][ T5827]  ? kmem_cache_alloc_trace+0xc3/0x290
[  232.047249][ T5827]  v9fs_mount+0x7f/0x790
[  232.051480][ T5827]  ? cap_capable+0x23f/0x280
[  232.056065][ T5827]  legacy_get_tree+0xde/0x170
[  232.060718][ T5827]  ? iterate_incfs_dir+0x370/0x370
[  232.065806][ T5827]  vfs_get_tree+0x85/0x260
[  232.070212][ T5827]  do_mount+0x18ab/0x2660
[  232.074523][ T5827]  ? copy_mount_string+0x30/0x30
[  232.079453][ T5827]  ? page_fault+0x2f/0x40
[  232.083807][ T5827]  ? copy_mount_options+0x1e8/0x320
[  232.088982][ T5827]  ? copy_mount_options+0x293/0x320
[  232.094156][ T5827]  ksys_mount+0xc2/0xf0
[  232.098291][ T5827]  __x64_sys_mount+0xb1/0xc0
[  232.102860][ T5827]  do_syscall_64+0xcb/0x150
[  232.107340][ T5827]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  232.113223][ T5827] RIP: 0033:0x45e219
[  232.117097][ T5827] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  232.136687][ T5827] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  232.145082][ T5827] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  232.153040][ T5827] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  232.160993][ T5827] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  232.168950][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017
[  232.176929][ T5827] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  232.190044][ T5827] SLUB: Unable to initialize free list for 9p-fcall-cache
[  232.217411][ T5827] kmem_cache_create(9p-fcall-cache) failed with error -22
[  232.228987][ T5827] CPU: 0 PID: 5827 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  232.239044][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  232.249111][ T5827] Call Trace:
[  232.252408][ T5827]  dump_stack+0x1dd/0x24e
[  232.256730][ T5827]  ? devkmsg_release+0x11c/0x11c
[  232.261658][ T5827]  ? show_regs_print_info+0x12/0x12
[  232.266849][ T5827]  ? create_cache+0x1cc/0x1f0
[  232.271508][ T5827]  kmem_cache_create_usercopy+0x8c/0x1d0
[  232.277112][ T5827]  p9_client_create+0x9ff/0xb90
[  232.282324][ T5827]  ? p9_parse_header+0x6b0/0x6b0
[  232.287240][ T5827]  ? __kasan_kmalloc+0x189/0x1c0
[  232.292161][ T5827]  ? __kmalloc_track_caller+0x20e/0x2c0
[  232.297681][ T5827]  ? vfs_get_tree+0x85/0x260
[  232.302245][ T5827]  v9fs_session_init+0x208/0x1a00
[  232.307256][ T5827]  ? v9fs_show_options+0x530/0x530
[  232.312358][ T5827]  ? v9fs_mount+0x5c/0x790
[  232.316746][ T5827]  ? v9fs_mount+0x5c/0x790
[  232.321138][ T5827]  ? kmem_cache_alloc_trace+0xc3/0x290
[  232.326576][ T5827]  v9fs_mount+0x7f/0x790
[  232.330795][ T5827]  ? cap_capable+0x23f/0x280
[  232.335369][ T5827]  legacy_get_tree+0xde/0x170
[  232.340026][ T5827]  ? iterate_incfs_dir+0x370/0x370
[  232.345120][ T5827]  vfs_get_tree+0x85/0x260
[  232.349514][ T5827]  do_mount+0x18ab/0x2660
[  232.353829][ T5827]  ? copy_mount_string+0x30/0x30
[  232.358738][ T5827]  ? page_fault+0x2f/0x40
[  232.363046][ T5827]  ? copy_mount_options+0x1e8/0x320
[  232.368226][ T5827]  ? copy_mount_options+0x293/0x320
[  232.373397][ T5827]  ksys_mount+0xc2/0xf0
[  232.377540][ T5827]  __x64_sys_mount+0xb1/0xc0
[  232.382115][ T5827]  do_syscall_64+0xcb/0x150
[  232.386590][ T5827]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  232.392455][ T5827] RIP: 0033:0x45e219
[  232.396321][ T5827] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  232.415912][ T5827] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  232.424297][ T5827] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  232.432250][ T5827] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  232.440196][ T5827] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  232.448141][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017
[  232.456094][ T5827] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
21:38:56 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x2e0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)

21:38:56 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000580)="c8326de5b27bd6d695de5f00d5dbe6b28dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c", 0x27}], 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="00000006000000065d4e0820c1f58f1a13bba9539c0b54e801000008", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6008005)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

21:38:56 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0xe00000000000000, 0x2e0)

21:38:56 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x205)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:56 executing program 4 (fault-call:3 fault-nth:24):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:56 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004104)

[  233.201933][ T5857] FAULT_INJECTION: forcing a failure.
[  233.201933][ T5857] name failslab, interval 1, probability 0, space 0, times 0
[  233.214822][ T5857] CPU: 0 PID: 5857 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  233.214828][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  233.214832][ T5857] Call Trace:
[  233.214849][ T5857]  dump_stack+0x1dd/0x24e
[  233.214860][ T5857]  ? devkmsg_release+0x11c/0x11c
[  233.214871][ T5857]  ? show_regs_print_info+0x12/0x12
[  233.214886][ T5857]  ? _raw_spin_lock_irqsave+0xf8/0x210
[  233.214898][ T5857]  should_fail+0x6fb/0x860
[  233.214910][ T5857]  ? setup_fault_attr+0x3d0/0x3d0
[  233.214922][ T5857]  ? _raw_spin_unlock_irqrestore+0x57/0x80
[  233.214935][ T5857]  ? __kmem_cache_create+0x180/0x6f0
[  233.214944][ T5857]  should_failslab+0x5/0x20
[  233.214954][ T5857]  kmem_cache_alloc+0x36/0x270
[  233.214963][ T5857]  ? cache_random_seq_create+0x188/0x1c0
[  233.214974][ T5857]  __kmem_cache_create+0x180/0x6f0
[  233.214984][ T5857]  ? __should_failslab+0x92/0x150
[  233.214992][ T5857]  ? create_cache+0x3b/0x1f0
[  233.215002][ T5857]  ? kmem_cache_alloc+0x1e0/0x270
[  233.215013][ T5857]  create_cache+0x156/0x1f0
[  233.215022][ T5857]  kmem_cache_create_usercopy+0x145/0x1d0
[  233.215033][ T5857]  p9_client_create+0x9ff/0xb90
[  233.215057][ T5857]  ? p9_parse_header+0x6b0/0x6b0
[  233.215070][ T5857]  ? v9fs_session_init+0xaf/0x1a00
[  233.215082][ T5857]  ? __kmalloc_track_caller+0x20e/0x2c0
[  233.215093][ T5857]  v9fs_session_init+0x208/0x1a00
[  233.215107][ T5857]  ? v9fs_show_options+0x530/0x530
[  233.215119][ T5857]  ? v9fs_mount+0x5c/0x790
[  233.215131][ T5857]  ? kmem_cache_alloc_trace+0xc3/0x290
[  233.215143][ T5857]  ? legacy_init_fs_context+0x4d/0xc0
[  233.215153][ T5857]  v9fs_mount+0x7f/0x790
[  233.215165][ T5857]  ? cap_capable+0x23f/0x280
[  233.215176][ T5857]  legacy_get_tree+0xde/0x170
[  233.215187][ T5857]  ? iterate_incfs_dir+0x370/0x370
[  233.215197][ T5857]  vfs_get_tree+0x85/0x260
[  233.215209][ T5857]  do_mount+0x18ab/0x2660
[  233.215226][ T5857]  ? copy_mount_string+0x30/0x30
[  233.401152][ T5857]  ? page_fault+0x2f/0x40
[  233.401166][ T5857]  ? copy_mount_options+0x1e8/0x320
[  233.401181][ T5857]  ? copy_mount_options+0x293/0x320
[  233.415861][ T5857]  ksys_mount+0xc2/0xf0
[  233.415872][ T5857]  __x64_sys_mount+0xb1/0xc0
[  233.415888][ T5857]  do_syscall_64+0xcb/0x150
[  233.429076][ T5857]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  233.429091][ T5857] RIP: 0033:0x45e219
[  233.429101][ T5857] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  233.429106][ T5857] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  233.429116][ T5857] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  233.429121][ T5857] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  233.429127][ T5857] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  233.429132][ T5857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018
[  233.429138][ T5857] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  233.438166][ T5857] kmem_cache_create(9p-fcall-cache) failed with error -22
[  233.515437][ T5857] CPU: 0 PID: 5857 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  233.515442][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  233.515445][ T5857] Call Trace:
[  233.515462][ T5857]  dump_stack+0x1dd/0x24e
[  233.515484][ T5857]  ? devkmsg_release+0x11c/0x11c
[  233.548165][ T5857]  ? show_regs_print_info+0x12/0x12
[  233.548187][ T5857]  ? create_cache+0x1cc/0x1f0
[  233.558014][ T5857]  kmem_cache_create_usercopy+0x8c/0x1d0
[  233.558025][ T5857]  p9_client_create+0x9ff/0xb90
[  233.558039][ T5857]  ? p9_parse_header+0x6b0/0x6b0
[  233.573481][ T5857]  ? v9fs_session_init+0xaf/0x1a00
[  233.573493][ T5857]  ? __kmalloc_track_caller+0x20e/0x2c0
[  233.573506][ T5857]  v9fs_session_init+0x208/0x1a00
[  233.589118][ T5857]  ? v9fs_show_options+0x530/0x530
[  233.589132][ T5857]  ? v9fs_mount+0x5c/0x790
[  233.589143][ T5857]  ? kmem_cache_alloc_trace+0xc3/0x290
[  233.589154][ T5857]  ? legacy_init_fs_context+0x4d/0xc0
[  233.589162][ T5857]  v9fs_mount+0x7f/0x790
[  233.589173][ T5857]  ? cap_capable+0x23f/0x280
[  233.589187][ T5857]  legacy_get_tree+0xde/0x170
[  233.622910][ T5857]  ? iterate_incfs_dir+0x370/0x370
[  233.622928][ T5857]  vfs_get_tree+0x85/0x260
[  233.632425][ T5857]  do_mount+0x18ab/0x2660
[  233.632437][ T5857]  ? copy_mount_string+0x30/0x30
[  233.632452][ T5857]  ? page_fault+0x2f/0x40
[  233.645986][ T5857]  ? copy_mount_options+0x1e8/0x320
[  233.646001][ T5857]  ? copy_mount_options+0x293/0x320
[  233.656362][ T5857]  ksys_mount+0xc2/0xf0
[  233.656373][ T5857]  __x64_sys_mount+0xb1/0xc0
[  233.656383][ T5857]  do_syscall_64+0xcb/0x150
[  233.656394][ T5857]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  233.656403][ T5857] RIP: 0033:0x45e219
[  233.656412][ T5857] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
21:38:57 executing program 4 (fault-call:3 fault-nth:25):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  233.656425][ T5857] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  233.707316][ T5857] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  233.707321][ T5857] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  233.707326][ T5857] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  233.707341][ T5857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018
[  233.739232][ T5857] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
21:38:57 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x206)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  233.818038][ T5875] FAULT_INJECTION: forcing a failure.
[  233.818038][ T5875] name failslab, interval 1, probability 0, space 0, times 0
[  233.838127][ T5875] CPU: 0 PID: 5875 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  233.848199][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  233.858232][ T5875] Call Trace:
[  233.861507][ T5875]  dump_stack+0x1dd/0x24e
[  233.865817][ T5875]  ? devkmsg_release+0x11c/0x11c
[  233.870735][ T5875]  ? show_regs_print_info+0x12/0x12
[  233.875925][ T5875]  ? _raw_spin_lock_irqsave+0xf8/0x210
[  233.881376][ T5875]  should_fail+0x6fb/0x860
[  233.885774][ T5875]  ? setup_fault_attr+0x3d0/0x3d0
[  233.890780][ T5875]  ? _raw_spin_unlock_irqrestore+0x57/0x80
[  233.896568][ T5875]  ? __kmem_cache_create+0x180/0x6f0
[  233.901831][ T5875]  should_failslab+0x5/0x20
[  233.906311][ T5875]  kmem_cache_alloc+0x36/0x270
[  233.911050][ T5875]  ? cache_random_seq_create+0x188/0x1c0
[  233.916659][ T5875]  __kmem_cache_create+0x180/0x6f0
[  233.921754][ T5875]  ? __should_failslab+0x92/0x150
[  233.926754][ T5875]  ? create_cache+0x3b/0x1f0
[  233.931321][ T5875]  ? kmem_cache_alloc+0x1e0/0x270
[  233.936339][ T5875]  create_cache+0x156/0x1f0
[  233.940824][ T5875]  kmem_cache_create_usercopy+0x145/0x1d0
[  233.947736][ T5875]  p9_client_create+0x9ff/0xb90
[  233.952583][ T5875]  ? p9_parse_header+0x6b0/0x6b0
[  233.957521][ T5875]  ? __kasan_kmalloc+0x189/0x1c0
[  233.962445][ T5875]  ? __kmalloc_track_caller+0x20e/0x2c0
[  233.967966][ T5875]  ? vfs_get_tree+0x85/0x260
[  233.972536][ T5875]  v9fs_session_init+0x208/0x1a00
[  233.977550][ T5875]  ? v9fs_show_options+0x530/0x530
[  233.982643][ T5875]  ? v9fs_mount+0x5c/0x790
[  233.987057][ T5875]  ? kmem_cache_alloc_trace+0xc3/0x290
[  233.992497][ T5875]  ? legacy_init_fs_context+0x4d/0xc0
[  233.997863][ T5875]  v9fs_mount+0x7f/0x790
[  234.002087][ T5875]  ? cap_capable+0x23f/0x280
[  234.006656][ T5875]  legacy_get_tree+0xde/0x170
[  234.011311][ T5875]  ? iterate_incfs_dir+0x370/0x370
[  234.016427][ T5875]  vfs_get_tree+0x85/0x260
[  234.020821][ T5875]  do_mount+0x18ab/0x2660
[  234.025145][ T5875]  ? copy_mount_string+0x30/0x30
[  234.030071][ T5875]  ? page_fault+0x2f/0x40
[  234.034387][ T5875]  ? copy_mount_options+0x1e8/0x320
[  234.039565][ T5875]  ? copy_mount_options+0x293/0x320
[  234.044740][ T5875]  ksys_mount+0xc2/0xf0
[  234.048875][ T5875]  __x64_sys_mount+0xb1/0xc0
[  234.053445][ T5875]  do_syscall_64+0xcb/0x150
[  234.057943][ T5875]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  234.063814][ T5875] RIP: 0033:0x45e219
[  234.067687][ T5875] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  234.087283][ T5875] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  234.095674][ T5875] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  234.103625][ T5875] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  234.111573][ T5875] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
21:38:57 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r3, r6, 0x0, 0x800000080004109)

[  234.119524][ T5875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019
[  234.127477][ T5875] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  234.147022][ T5875] kmem_cache_create(9p-fcall-cache) failed with error -22
[  234.154667][ T5875] CPU: 0 PID: 5875 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  234.164714][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  234.174749][ T5875] Call Trace:
[  234.178049][ T5875]  dump_stack+0x1dd/0x24e
[  234.182360][ T5875]  ? devkmsg_release+0x11c/0x11c
[  234.187269][ T5875]  ? show_regs_print_info+0x12/0x12
[  234.192439][ T5875]  ? create_cache+0x1cc/0x1f0
[  234.197098][ T5875]  kmem_cache_create_usercopy+0x8c/0x1d0
[  234.202711][ T5875]  p9_client_create+0x9ff/0xb90
[  234.207538][ T5875]  ? p9_parse_header+0x6b0/0x6b0
[  234.212448][ T5875]  ? __kasan_kmalloc+0x189/0x1c0
[  234.217370][ T5875]  ? __kmalloc_track_caller+0x20e/0x2c0
[  234.222898][ T5875]  ? vfs_get_tree+0x85/0x260
[  234.227458][ T5875]  v9fs_session_init+0x208/0x1a00
[  234.232486][ T5875]  ? v9fs_show_options+0x530/0x530
[  234.237579][ T5875]  ? v9fs_mount+0x5c/0x790
[  234.241981][ T5875]  ? kmem_cache_alloc_trace+0xc3/0x290
[  234.247415][ T5875]  ? legacy_init_fs_context+0x4d/0xc0
[  234.252769][ T5875]  v9fs_mount+0x7f/0x790
[  234.256990][ T5875]  ? cap_capable+0x23f/0x280
[  234.261579][ T5875]  legacy_get_tree+0xde/0x170
[  234.266225][ T5875]  ? iterate_incfs_dir+0x370/0x370
[  234.271304][ T5875]  vfs_get_tree+0x85/0x260
[  234.275693][ T5875]  do_mount+0x18ab/0x2660
[  234.280000][ T5875]  ? copy_mount_string+0x30/0x30
[  234.284928][ T5875]  ? page_fault+0x2f/0x40
[  234.289253][ T5875]  ? copy_mount_options+0x1e8/0x320
[  234.294423][ T5875]  ? copy_mount_options+0x293/0x320
[  234.299593][ T5875]  ksys_mount+0xc2/0xf0
[  234.303718][ T5875]  __x64_sys_mount+0xb1/0xc0
[  234.308304][ T5875]  do_syscall_64+0xcb/0x150
[  234.312789][ T5875]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  234.318650][ T5875] RIP: 0033:0x45e219
[  234.322526][ T5875] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  234.342117][ T5875] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  234.350513][ T5875] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  234.358462][ T5875] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
21:38:57 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x207)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

21:38:58 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
poll(0x0, 0x4000000000000000, 0x2e0)

21:38:58 executing program 4 (fault-call:3 fault-nth:26):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, ']]@!#:\x00\x00\x00\x00\x93\xe9}\xc2\xfa\x91\x17\xf7\xf5\xbb\xb3\xbb\xb1\xa7\xf1\x9a\x0e\xe8\xb1\x93\x01#\xc6R\xf9o\xe6\xce\x1fi\x9b\xc7\ar\xeaz\xb1\x0e\x9b\xfc\xec\x10\xcb\xa5\xb6\xaa^|\xb2\xa1\x92\a,\xfc\x9a\xdd!\xb4\xf8u\x93\x8b\xdc\xb6\\\xdbB\x90\x8b\x00\xce\x95\x11\xe4X\x83-8Q\\\xae\xa9\x82u\xbb\xc4E!\xe5&\'&\xf4\xcc\x03\xc5;x\x0e\"Y\xf0\xb7r\xfdL\x9e\xca\xfc\x85\x02j\xc4\x84\b\xd2v:\xa4\x7f\x05\x87\x9dY\xb8P\xc5\xf4\xd7\x05W=`U\xe2\xd0\xeb\xe6\x1b\xea\xda\xc5\x95%8\x9a\xd9KH\xa1I\xf2\xbf\xed\x85\xd0g\a\xc8\x1dt\xd0\xcb\xbb\x829\xecf\xe0Z4\x80:\x7f\x8d\x91irP5Z\x9a\xa9\xf5\xbdR\f\x86\xe7\xef>az\xd38z\xa72\xa7\x8f\x91\xe1\xed\x95\xc4\xb6\x93\xb39\xde\xbaj\x82f\xc4\x84\xb4\xda\xa4_O\x9dN\'\x9f8\xd9\x8c\xda\xb3\x17\xcfkPz\xaa\x87;\x8d\x96[\xd3I*/\xe4o\xf4\tRa\xe3\x1c\xb3\xb0\tK\x1fV\x96!\xc23$H\x89c\x86\xf7\xf3\xa2\x13\x94\x93_\f'}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  234.366422][ T5875] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  234.374371][ T5875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019
[  234.382327][ T5875] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  234.456344][ T5897] FAULT_INJECTION: forcing a failure.
[  234.456344][ T5897] name failslab, interval 1, probability 0, space 0, times 0
[  234.476813][ T5897] CPU: 1 PID: 5897 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  234.486884][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  234.496924][ T5897] Call Trace:
[  234.500211][ T5897]  dump_stack+0x1dd/0x24e
[  234.504543][ T5897]  ? devkmsg_release+0x11c/0x11c
[  234.509465][ T5897]  ? unwind_next_frame+0x1aa9/0x1f30
[  234.514730][ T5897]  ? show_regs_print_info+0x12/0x12
[  234.519921][ T5897]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  234.525966][ T5897]  should_fail+0x6fb/0x860
[  234.530361][ T5897]  ? setup_fault_attr+0x3d0/0x3d0
[  234.535364][ T5897]  ? is_bpf_text_address+0x290/0x2b0
[  234.540713][ T5897]  ? __kernfs_new_node+0xdb/0x6e0
[  234.545714][ T5897]  should_failslab+0x5/0x20
[  234.550207][ T5897]  kmem_cache_alloc+0x36/0x270
[  234.554950][ T5897]  ? unwind_get_return_address+0x48/0x90
[  234.560559][ T5897]  __kernfs_new_node+0xdb/0x6e0
[  234.565386][ T5897]  ? kernfs_new_node+0x160/0x160
[  234.570301][ T5897]  ? stack_trace_save+0x120/0x1f0
[  234.575301][ T5897]  ? stack_trace_snprint+0x150/0x150
[  234.580579][ T5897]  ? __kasan_kmalloc+0x189/0x1c0
[  234.585942][ T5897]  kernfs_create_dir_ns+0x90/0x220
[  234.591040][ T5897]  sysfs_create_dir_ns+0x181/0x3a0
[  234.596131][ T5897]  ? sysfs_warn_dup+0xb0/0xb0
[  234.600787][ T5897]  ? pcpu_block_update_hint_alloc+0x98f/0xd00
[  234.606834][ T5897]  kobject_add_internal+0x55f/0xb50
[  234.612014][ T5897]  kobject_init_and_add+0x122/0x190
[  234.617192][ T5897]  ? kobject_add+0x230/0x230
[  234.621774][ T5897]  ? cpumask_next+0xc/0x20
[  234.626172][ T5897]  ? mutex_unlock+0x19/0x40
[  234.630666][ T5897]  sysfs_slab_add+0x193/0x310
[  234.635333][ T5897]  __kmem_cache_create+0x67c/0x6f0
[  234.640438][ T5897]  ? __should_failslab+0x92/0x150
[  234.645440][ T5897]  ? create_cache+0x3b/0x1f0
[  234.650010][ T5897]  ? kmem_cache_alloc+0x1e0/0x270
[  234.655015][ T5897]  create_cache+0x156/0x1f0
[  234.659502][ T5897]  kmem_cache_create_usercopy+0x145/0x1d0
[  234.665200][ T5897]  p9_client_create+0x9ff/0xb90
[  234.670029][ T5897]  ? p9_parse_header+0x6b0/0x6b0
[  234.674957][ T5897]  ? __kasan_kmalloc+0x189/0x1c0
[  234.679886][ T5897]  ? __kmalloc_track_caller+0x20e/0x2c0
[  234.685407][ T5897]  ? vfs_get_tree+0x85/0x260
[  234.689973][ T5897]  v9fs_session_init+0x208/0x1a00
[  234.694992][ T5897]  ? v9fs_show_options+0x530/0x530
[  234.700090][ T5897]  ? v9fs_mount+0x5c/0x790
[  234.704486][ T5897]  ? kmem_cache_alloc_trace+0xc3/0x290
[  234.709934][ T5897]  ? legacy_init_fs_context+0x4d/0xc0
[  234.715282][ T5897]  v9fs_mount+0x7f/0x790
[  234.719502][ T5897]  ? cap_capable+0x23f/0x280
[  234.724069][ T5897]  legacy_get_tree+0xde/0x170
[  234.728720][ T5897]  ? iterate_incfs_dir+0x370/0x370
[  234.733811][ T5897]  vfs_get_tree+0x85/0x260
[  234.738208][ T5897]  do_mount+0x18ab/0x2660
[  234.742516][ T5897]  ? copy_mount_string+0x30/0x30
[  234.747431][ T5897]  ? copy_mount_options+0x1f8/0x320
[  234.752603][ T5897]  ? copy_mount_options+0x230/0x320
[  234.757777][ T5897]  ? __sanitizer_cov_trace_pc+0x45/0x50
[  234.763296][ T5897]  ? copy_mount_options+0x293/0x320
[  234.768470][ T5897]  ksys_mount+0xc2/0xf0
[  234.772604][ T5897]  __x64_sys_mount+0xb1/0xc0
[  234.777175][ T5897]  do_syscall_64+0xcb/0x150
[  234.781660][ T5897]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  234.787530][ T5897] RIP: 0033:0x45e219
[  234.791404][ T5897] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  234.810993][ T5897] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  234.819401][ T5897] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  234.827349][ T5897] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  234.835296][ T5897] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  234.843260][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a
[  234.851238][ T5897] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  234.861109][ T5897] kobject_add_internal failed for 9p-fcall-cache (error: -12 parent: slab)
[  234.870733][ T5897] ==================================================================
[  234.878801][ T5897] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x610
[  234.887109][ T5897] 
[  234.887121][ T5897] CPU: 0 PID: 5897 Comm: syz-executor.4 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0
[  234.887125][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  234.887128][ T5897] Call Trace:
[  234.887142][ T5897]  dump_stack+0x1dd/0x24e
[  234.887152][ T5897]  ? show_regs_print_info+0x12/0x12
[  234.887169][ T5897]  ? printk+0xcf/0x114
[  234.887185][ T5897]  ? kmem_cache_free+0xac/0x610
[  234.931779][ T5897]  ? kmem_cache_free+0xac/0x610
[  234.931790][ T5897]  print_address_description+0x96/0x640
[  234.931800][ T5897]  ? devkmsg_release+0x11c/0x11c
[  234.931810][ T5897]  ? do_mount+0x18ab/0x2660
[  234.931821][ T5897]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  234.931832][ T5897]  ? kmem_cache_free+0xac/0x610
[  234.931841][ T5897]  ? kmem_cache_free+0xac/0x610
[  234.931850][ T5897]  kasan_report_invalid_free+0x54/0xc0
[  234.931859][ T5897]  __kasan_slab_free+0x102/0x230
[  234.931876][ T5897]  ? slab_free_freelist_hook+0xd0/0x150
[  234.931884][ T5897]  ? kobject_cleanup+0x1e1/0x3c0
[  234.931890][ T5897]  ? sysfs_slab_remove_workfn+0x40/0x40
[  234.931896][ T5897]  ? kmem_cache_free+0xac/0x610
[  234.931905][ T5897]  ? kfree_const+0x26/0x40
[  234.931911][ T5897]  ? kobject_cleanup+0x39c/0x3c0
[  234.931921][ T5897]  slab_free_freelist_hook+0xd0/0x150
[  234.931930][ T5897]  ? create_cache+0x1cc/0x1f0
[  234.931938][ T5897]  kmem_cache_free+0xac/0x610
[  234.931946][ T5897]  ? __kmem_cache_create+0x693/0x6f0
[  234.931953][ T5897]  ? __should_failslab+0x92/0x150
[  234.931960][ T5897]  ? create_cache+0x3b/0x1f0
[  234.931968][ T5897]  create_cache+0x1cc/0x1f0
[  234.931978][ T5897]  kmem_cache_create_usercopy+0x145/0x1d0
[  234.931986][ T5897]  p9_client_create+0x9ff/0xb90
[  234.931998][ T5897]  ? p9_parse_header+0x6b0/0x6b0
[  234.932005][ T5897]  ? __kasan_kmalloc+0x189/0x1c0
[  234.932014][ T5897]  ? __kmalloc_track_caller+0x20e/0x2c0
[  234.932022][ T5897]  ? vfs_get_tree+0x85/0x260
[  234.932033][ T5897]  v9fs_session_init+0x208/0x1a00
[  234.932044][ T5897]  ? v9fs_show_options+0x530/0x530
[  234.932055][ T5897]  ? v9fs_mount+0x5c/0x790
[  234.932064][ T5897]  ? kmem_cache_alloc_trace+0xc3/0x290
[  234.932075][ T5897]  ? legacy_init_fs_context+0x4d/0xc0
[  234.932083][ T5897]  v9fs_mount+0x7f/0x790
[  234.932094][ T5897]  ? cap_capable+0x23f/0x280
[  234.932104][ T5897]  legacy_get_tree+0xde/0x170
[  234.932112][ T5897]  ? iterate_incfs_dir+0x370/0x370
[  234.932121][ T5897]  vfs_get_tree+0x85/0x260
[  234.932131][ T5897]  do_mount+0x18ab/0x2660
[  234.932142][ T5897]  ? copy_mount_string+0x30/0x30
[  234.932152][ T5897]  ? copy_mount_options+0x1f8/0x320
[  234.932159][ T5897]  ? copy_mount_options+0x230/0x320
[  234.932169][ T5897]  ? __sanitizer_cov_trace_pc+0x45/0x50
[  234.932179][ T5897]  ? copy_mount_options+0x293/0x320
[  234.932188][ T5897]  ksys_mount+0xc2/0xf0
[  234.932199][ T5897]  __x64_sys_mount+0xb1/0xc0
[  234.932209][ T5897]  do_syscall_64+0xcb/0x150
[  234.932219][ T5897]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  234.932227][ T5897] RIP: 0033:0x45e219
[  234.932237][ T5897] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  234.932242][ T5897] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  234.932250][ T5897] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  234.932256][ T5897] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  234.932267][ T5897] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  235.225364][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a
[  235.225370][ T5897] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  235.225377][ T5897] 
[  235.225383][ T5897] Allocated by task 5897:
[  235.225409][ T5897]  __kasan_kmalloc+0x129/0x1c0
[  235.252688][ T5897]  kmem_cache_alloc+0x1e0/0x270
[  235.252695][ T5897]  create_cache+0x3b/0x1f0
[  235.252710][ T5897]  kmem_cache_create_usercopy+0x145/0x1d0
[  235.267630][ T5897]  p9_client_create+0x9ff/0xb90
[  235.267639][ T5897]  v9fs_session_init+0x208/0x1a00
[  235.267646][ T5897]  v9fs_mount+0x7f/0x790
[  235.267656][ T5897]  legacy_get_tree+0xde/0x170
[  235.267664][ T5897]  vfs_get_tree+0x85/0x260
[  235.267673][ T5897]  do_mount+0x18ab/0x2660
[  235.267681][ T5897]  ksys_mount+0xc2/0xf0
[  235.267688][ T5897]  __x64_sys_mount+0xb1/0xc0
[  235.267696][ T5897]  do_syscall_64+0xcb/0x150
[  235.267711][ T5897]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  235.314231][ T5897] 
[  235.314237][ T5897] Freed by task 5897:
[  235.314259][ T5897]  __kasan_slab_free+0x17e/0x230
[  235.325459][ T5897]  slab_free_freelist_hook+0xd0/0x150
[  235.325467][ T5897]  kmem_cache_free+0xac/0x610
[  235.325475][ T5897]  kobject_cleanup+0x1e1/0x3c0
[  235.325481][ T5897]  sysfs_slab_add+0x1a1/0x310
[  235.325488][ T5897]  __kmem_cache_create+0x67c/0x6f0
[  235.325495][ T5897]  create_cache+0x156/0x1f0
[  235.325502][ T5897]  kmem_cache_create_usercopy+0x145/0x1d0
[  235.325509][ T5897]  p9_client_create+0x9ff/0xb90
[  235.325516][ T5897]  v9fs_session_init+0x208/0x1a00
[  235.325525][ T5897]  v9fs_mount+0x7f/0x790
[  235.325541][ T5897]  legacy_get_tree+0xde/0x170
[  235.325550][ T5897]  vfs_get_tree+0x85/0x260
[  235.325559][ T5897]  do_mount+0x18ab/0x2660
[  235.325566][ T5897]  ksys_mount+0xc2/0xf0
[  235.325574][ T5897]  __x64_sys_mount+0xb1/0xc0
[  235.325582][ T5897]  do_syscall_64+0xcb/0x150
[  235.325590][ T5897]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  235.325592][ T5897] 
[  235.325599][ T5897] The buggy address belongs to the object at ffff8881e11eaf00
[  235.325599][ T5897]  which belongs to the cache kmem_cache of size 472
[  235.325607][ T5897] The buggy address is located 0 bytes inside of
[  235.325607][ T5897]  472-byte region [ffff8881e11eaf00, ffff8881e11eb0d8)
[  235.325610][ T5897] The buggy address belongs to the page:
[  235.325618][ T5897] page:ffffea0007847a80 refcount:1 mapcount:0 mapping:ffff8881f6002000 index:0x0 compound_mapcount: 0
[  235.325632][ T5897] flags: 0x8000000000010200(slab|head)
[  235.457935][ T5897] raw: 8000000000010200 ffffea0007d01c00 0000000300000003 ffff8881f6002000
[  235.457943][ T5897] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000
[  235.457954][ T5897] page dumped because: kasan: bad access detected
[  235.481465][ T5897] 
[  235.481467][ T5897] Memory state around the buggy address:
[  235.481476][ T5897]  ffff8881e11eae00: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc
[  235.481481][ T5897]  ffff8881e11eae80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  235.481486][ T5897] >ffff8881e11eaf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  235.481490][ T5897]                    ^
[  235.481496][ T5897]  ffff8881e11eaf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  235.481502][ T5897]  ffff8881e11eb000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  235.481505][ T5897] ==================================================================
[  235.481508][ T5897] Disabling lock debugging due to kernel taint
[  235.486223][ T5897] Kernel panic - not syncing: panic_on_warn set ...
[  235.486243][ T5897] CPU: 0 PID: 5897 Comm: syz-executor.4 Tainted: G    B             5.4.89-syzkaller-00264-gdc04463953b2 #0
[  235.486247][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  235.486249][ T5897] Call Trace:
[  235.486265][ T5897]  dump_stack+0x1dd/0x24e
[  235.486276][ T5897]  ? devkmsg_release+0x11c/0x11c
[  235.486286][ T5897]  ? show_regs_print_info+0x12/0x12
[  235.486298][ T5897]  panic+0x285/0x750
[  235.486308][ T5897]  ? schedule_preempt_disabled+0x20/0x20
[  235.486318][ T5897]  ? nmi_panic+0x90/0x90
[  235.486329][ T5897]  ? kmem_cache_free+0xac/0x610
[  235.486338][ T5897]  ? ___preempt_schedule+0x16/0x20
[  235.486349][ T5897]  ? kmem_cache_free+0xac/0x610
[  235.486357][ T5897]  ? kmem_cache_free+0xac/0x610
[  235.486366][ T5897]  kasan_report_invalid_free+0xb7/0xc0
[  235.486374][ T5897]  __kasan_slab_free+0x102/0x230
[  235.486390][ T5897]  ? slab_free_freelist_hook+0xd0/0x150
[  235.486399][ T5897]  ? kobject_cleanup+0x1e1/0x3c0
[  235.486407][ T5897]  ? sysfs_slab_remove_workfn+0x40/0x40
[  235.486414][ T5897]  ? kmem_cache_free+0xac/0x610
[  235.486424][ T5897]  ? kfree_const+0x26/0x40
[  235.486431][ T5897]  ? kobject_cleanup+0x39c/0x3c0
[  235.486442][ T5897]  slab_free_freelist_hook+0xd0/0x150
[  235.486451][ T5897]  ? create_cache+0x1cc/0x1f0
[  235.486460][ T5897]  kmem_cache_free+0xac/0x610
[  235.486469][ T5897]  ? __kmem_cache_create+0x693/0x6f0
[  235.486484][ T5897]  ? __should_failslab+0x92/0x150
[  235.486492][ T5897]  ? create_cache+0x3b/0x1f0
[  235.486501][ T5897]  create_cache+0x1cc/0x1f0
[  235.486510][ T5897]  kmem_cache_create_usercopy+0x145/0x1d0
[  235.486520][ T5897]  p9_client_create+0x9ff/0xb90
[  235.486532][ T5897]  ? p9_parse_header+0x6b0/0x6b0
[  235.486540][ T5897]  ? __kasan_kmalloc+0x189/0x1c0
[  235.486550][ T5897]  ? __kmalloc_track_caller+0x20e/0x2c0
[  235.486559][ T5897]  ? vfs_get_tree+0x85/0x260
[  235.486570][ T5897]  v9fs_session_init+0x208/0x1a00
[  235.486594][ T5897]  ? v9fs_show_options+0x530/0x530
[  235.486606][ T5897]  ? v9fs_mount+0x5c/0x790
[  235.486615][ T5897]  ? kmem_cache_alloc_trace+0xc3/0x290
[  235.486626][ T5897]  ? legacy_init_fs_context+0x4d/0xc0
[  235.486641][ T5897]  v9fs_mount+0x7f/0x790
[  235.486651][ T5897]  ? cap_capable+0x23f/0x280
[  235.486659][ T5897]  legacy_get_tree+0xde/0x170
[  235.486667][ T5897]  ? iterate_incfs_dir+0x370/0x370
[  235.486676][ T5897]  vfs_get_tree+0x85/0x260
[  235.486685][ T5897]  do_mount+0x18ab/0x2660
[  235.486696][ T5897]  ? copy_mount_string+0x30/0x30
[  235.486706][ T5897]  ? copy_mount_options+0x1f8/0x320
[  235.486714][ T5897]  ? copy_mount_options+0x230/0x320
[  235.486724][ T5897]  ? __sanitizer_cov_trace_pc+0x45/0x50
[  235.486733][ T5897]  ? copy_mount_options+0x293/0x320
[  235.486743][ T5897]  ksys_mount+0xc2/0xf0
[  235.486752][ T5897]  __x64_sys_mount+0xb1/0xc0
[  235.486760][ T5897]  do_syscall_64+0xcb/0x150
[  235.486769][ T5897]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  235.486777][ T5897] RIP: 0033:0x45e219
[  235.486786][ T5897] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  235.486791][ T5897] RSP: 002b:00007f7e984e4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  235.486800][ T5897] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  235.486805][ T5897] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000
[  235.486810][ T5897] RBP: 00007f7e984e4ca0 R08: 0000000020000300 R09: 0000000000000000
[  235.486816][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a
[  235.486821][ T5897] R13: 00007ffea9c0ffef R14: 00007f7e984e59c0 R15: 000000000119bf8c
[  235.487291][ T5897] Kernel Offset: disabled
[  235.907954][ T5897] Rebooting in 86400 seconds..