, 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:47 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x9e70152096ddf01b) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r1, 0x3e, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x3, r2, 0x0, 0xffffffffffffff00}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xe2f5, r0, 0x0, 0xfffffffffffffe6d, 0x400, 0x0, 0x0, r3}]) 09:25:47 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2500, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 473.089014][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 473.089023][ T26] audit: type=1804 audit(1574501147.866:602): pid=30548 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/720/bus" dev="sda1" ino=17807 res=1 09:25:48 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x40) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:48 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x0, 0x0, 0xa07100}]) 09:25:48 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2800, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:48 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3, 0x408000) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) [ 473.276822][ T26] audit: type=1804 audit(1574501147.876:603): pid=30493 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/720/bus" dev="sda1" ino=17807 res=1 09:25:48 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x0, 0x0, 0x1000000}]) [ 473.433530][ T26] audit: type=1804 audit(1574501148.126:604): pid=30556 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/728/bus" dev="sda1" ino=17617 res=1 09:25:48 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x41, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000001c0)={{0x1, 0x0, @identifier="5e9342b41460687d7a81ddeaac022cf4"}}) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x110, 0xffffffffffffffff, 0x7a0b9000) fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r3, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000280)) fstat(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {0x28}, {0x6}]}) setregid(r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r10, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r12, 0x0) setresuid(r12, r7, r8) fchown(r2, r1, r5) r13 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r13, 0x0) ioctl$RTC_PIE_OFF(r13, 0x7006) r14 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r14, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xffffffffffffff50) ioctl$UI_SET_MSCBIT(r14, 0x40045568, 0x12) r15 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) r16 = dup3(r14, r15, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r16, 0xc08c5335, &(0x7f0000000340)={0x1f, 0x2, 0x7, 'queue1\x00', 0x8}) io_setup(0x4b4, &(0x7f00000002c0)) 09:25:48 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2900, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 473.507231][ T26] audit: type=1804 audit(1574501148.226:605): pid=30578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/721/bus" dev="sda1" ino=17811 res=1 09:25:48 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 473.569276][ T26] audit: type=1804 audit(1574501148.336:606): pid=30578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/721/bus" dev="sda1" ino=17811 res=1 09:25:48 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000400)=ANY=[@ANYBLOB="67d7f5945216b635861c510d9cd87ab06569f054b72b81b92fdbd1d5969482c5f186e4826220ceb118b9c5e86e6e6766d3e62c6e7134bc991301bc704789f1e6f1c666590400000013c57394b676e513bd41e84767aedd188da44e0ca734d305f49e3385bd964b1961238614c700"/120], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x4, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[]) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:48 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) io_submit(r1, 0x2, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 473.598377][ T26] audit: type=1804 audit(1574501148.336:607): pid=30585 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/721/bus" dev="sda1" ino=17811 res=1 09:25:48 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) getdents(r2, &(0x7f0000000080)=""/40, 0x28) 09:25:48 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2a00, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:48 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf1539ce5}]) 09:25:48 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x0, 0x0, 0x2000000}]) 09:25:48 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x2, 0x1, @dev={0xfe, 0x80, [], 0x1a}, 0x3ff}, {0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, 0x51, [0x91ae, 0x400, 0x20, 0x1, 0x4, 0x9, 0xfff, 0x1f]}, 0x5c) [ 473.932667][ T26] audit: type=1804 audit(1574501148.716:608): pid=30606 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/722/bus" dev="sda1" ino=17797 res=1 09:25:48 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x3400, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 473.990790][T30594] print_req_error: 32 callbacks suppressed [ 473.990841][T30594] blk_update_request: I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 09:25:48 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000005c0)={0x0, @src_change}) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r3, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x12) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000480)=0x0) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x4, &(0x7f0000000340)=[{&(0x7f0000000100)="c9ccf77fe830b1ec83e913416a18350161e524dee7a8b9f013a66167fe1b742e03b69fa374579f84e3117acb", 0x2c, 0x6}, {&(0x7f0000000140)="0ace65", 0x3, 0x9}, {&(0x7f0000000180)="acc88f43d8d2afd58463b1e2ee7263bd559f294152ad6ccb89ce9048686ffbc757dad1f5f49412fbd70a7cfd528ea48a44083ffde1342d307cfbc28ce921c5d0e728b4cd1ac8f66fa0f1a79d5ba47bb24f442df320e6dd61185e900681529a455903ea", 0x63, 0x8}, {&(0x7f0000000240)="f08fd93c545086b6702650a5b74d3cc742b3b6db3c9ef7c86cc3c213c4a459e64894d1f44e79e821cc800c98dd2e91625203afe00d52add097ad176fd816a898bb84629e6a9d80024539190f6b6cef509b258cef610c6d8cb8372b967d30a8f3af7296c0e6ab920ed80390dfca9db14ce211e6522488c9ab608deb39bab46099492a56959d8f7a26000312ae04719d1e684670812e94198d0feb593fb37052abf0a52e4472d7f09aa38f40b27fff3624be76140c77944b", 0xb7, 0xff}], 0x2000080, &(0x7f00000004c0)={[{@fmask={'fmask', 0x3d, 0x72e}}, {@show_sys_files_yes='show_sys_files=yes'}, {@dmask={'dmask', 0x3d, 0x1000}}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@audit='audit'}, {@smackfshat={'smackfshat', 0x3d, 'em1md5sumvmnet1bdev['}}, {@appraise='appraise'}, {@fowner_eq={'fowner', 0x3d, r4}}]}) [ 474.118729][ T26] audit: type=1804 audit(1574501148.896:609): pid=30630 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/722/bus" dev="sda1" ino=17797 res=1 09:25:49 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x0, 0x0, 0x3000000}]) 09:25:49 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x18, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x40000}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000940)=[{&(0x7f0000000440)="406bd0dae7c0a9a46c0830c20b4922e6cd54edd41a61914787ec4ecbd5979875a76e8ed8264e6a4ba5a0814c651e3f786e7e0db47570e598c38d49c3489ecc2671bf2ca1ad73a9c32bdfc4c84847e0285cc15c1882dabd56fc8dcfee68e74e0131bb4b89f6472791494e69d33679f598166047c0d1878615a47eb04d56126dd49c7107a7fa59d6e3e1e83c2027870f54b52903946e16e2515a"}, {&(0x7f0000000500)="0eba548b95d57592a118d76d8a33ce75c761173bfdfe5bf2124a75cc6d4e1847e8525dc5209c04c85d1e309ff3ef743568d9ba7e365f1ce9c7d49b9a7f3e905c10afd326b00e124ccf6f0f0d56d7570344a00986617a56bb831cf5739a666eea5fdbc3610ee032f63aa4581fb31fddeaabe70cb7a8645f153c214fe18fb523fbbf8a5597b870a351879de336b81182fe35da8bd705a90be6e06248ca96d545786a7d77c802fa92bfd8c35ee754b2e138c67fbe694533ed2763e4712a8c8c8e4a461e8ed8424aaf4f3895a51091c7a5f63e549dd79e437b3fad25334cffd040f25c37037067191d48ed3c51919193b292d8943cc4526007"}, {&(0x7f0000000600)="780e73d72b8f611d5e131a81927c2e3dffa8cc95f7b2994f3d91208d97868e6640b77c71d575938be8373babc4be58aa2608f68473f02291a10f15b15412513260bfd4e560c768a7cfb4a01801f5e45c386ae305fa71b21f7216cfb9e791d25e7cb3bd4fdec79f07db0a79444ae4fa"}, {&(0x7f0000000680)="0d1123bb0797b33cf6cb7b631ae8895d472b8ed644c07a0ec78f7323f11e8046949c1ba7d74b758715cbaae92b03c9f84ba402eea4333294cdca31c58ff73a1ba3926c5360dd4dfbd245b48244d0a7e06bd592bb0b4c18ffd4150ed5e70d89dd32bd4e9a9468045b2d2f1fc9b1cadd2dfddf927a8dd7ca45452d1ca28e1771d8ed811da6119cb071ee74ce92b9d3d4151fda56fb31a4bbae837e02b5605532a4ee389f74d64145bad4769a1457ec94fc369b83609ae8506f4d6b168dcdb5f88906e5440bef8823fe97836c9645dfc0ca86a6d2c9038f663e811c584e6c281642a71105874f77fb84dea4ad6f0cc6ae930095fd"}, {&(0x7f0000000780)="aa07eb454c89aa"}, {&(0x7f00000007c0)="e78cc5a529b7"}, {&(0x7f0000000800)="d5365d2f6f20be4225"}, {&(0x7f0000000840)="64aa5e3f54b89e880a04bd5dd4"}, {&(0x7f0000000880)="fe3eb06ee4793bf88cb8008524f82c56ab72259628177a593b1120d0a2a7478eaeb9940f2386b5e1856ad581127ccb2f233e5bdb043cef269cf05b0048bf3ea21704c163342b4af737ee189355b90d25e900bdcbd180a6679400953e7fddc85518afd0ef5113fd04d6e107ae32fa87248864b26c8034a65517ba28c800121d7af00d00e171a56599d27fbf307d82e692641a880584c6d2aafcfd25c3db91c2b438bfefb2c8abc3b30102f75a46d8a1"}], 0x247, 0x81805) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000400)=ANY=[@ANYBLOB="da7c2b151401f16ca5fe5752"], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffff9c, 0x0, 0x2000, 0x40, 0x0) [ 474.249260][ T26] audit: type=1804 audit(1574501148.896:610): pid=30606 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/722/bus" dev="sda1" ino=17797 res=1 09:25:49 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:49 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x3f00, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:49 executing program 4: openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, &(0x7f0000002600)) [ 474.302658][T30642] ntfs: (device loop2): parse_options(): Unrecognized mount option fowner. 09:25:49 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x0, 0x0, 0x4000000}]) 09:25:49 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x20, 0x10000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000080)) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:25:49 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x12) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000100)=""/159) 09:25:49 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x4000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:49 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x0, 0x0, 0x5000000}]) 09:25:49 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 09:25:49 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:49 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2842, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x3}, 0x8, 0x100800) write(r1, &(0x7f0000000080)="218598a3466d34e3f2950f585a77f5207db2fcf126bc919690512dd837a2aa2e4ed21db5b0e958aa6b", 0x29) io_setup(0x2, &(0x7f0000000100)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:25:49 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}) r3 = dup3(0xffffffffffffffff, r1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r7, r6) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r8 = fcntl$dupfd(r0, 0x0, r5) r9 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r9, &(0x7f0000000580)=ANY=[@ANYBLOB='\a'], 0x1) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x12) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r10, 0x0) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r11}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x22000, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d5accfbae875ad7098a43c61a8c14d2413e149d4f7c28447440df0a8638da29841ecb633b062bba827140d48572", @ANYRESHEX, @ANYBLOB="01000000000000", @ANYRESHEX, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:49 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x0, 0x0, 0x7000000}]) 09:25:49 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x400f, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:49 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x47a620eb8ca6db0b, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e23, @broadcast}}, 0x0, 0xf800, 0x0, "4e94c63d31b3b1462199c2bab336eb28b8643f1746d6dd07fe3b60759399ef205aa0b8be6912219e17910d656ccb7299d3e9567d6d2c354b31f6fe3c1b25d37d824c877244a715ce853975f8f649be24"}, 0xd8) io_setup(0x1, &(0x7f0000000040)=0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x80000001, 0xfdf623879f03b07a) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) io_submit(r2, 0x2, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xa9}]) 09:25:49 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r0, 0x20000000000002a2, &(0x7f0000002600)) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) sendmsg(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000100)="627601a4f674548de0b26ba69c79bf6ba599e2ab3aa3e4e7f3d752c3ea168c52e160f9acc1354c6a8e2a65a55a6d0266b0b033b1acb677bec48a652c388aeffc928b25f79e5d5b049ff286e8fd852a4b588ef98d7dab65be02203f9f5fe000653aa082be9e8f40a474329617f3869e34fff358314100977430c75708f7347c76947cf6259ea5c15ae76c707731ca7625625b9f0ec6d601ae00c14f4a20ce7e652970553d9f3192c047cac71f0172ecf22f214df9", 0xb4}, {&(0x7f00000001c0)="da17343718acb31df2f297add1021598a2e4e5c22f74dc1f16da655b2a878dce4dfe84d4bc4be55e33af7e225ea176846bec9acd9fdb20f3808b8ae7e4469b7ff9401b6ba75c38732230b59b5156ba995a4b3c340378c3e07e56e54c9b0b69e9864e0b2214a11960f6ac734a0c259a5ec6af17071a074d402612f1f27605ec536dbb310325940df7f8f1cf581ed23d9b6e", 0x91}, {&(0x7f0000000280)="058127d65f358d4d0185938b94", 0xd}, {&(0x7f0000000340)="8cfe9baddc209c31195bac8f9bd9a06c0417106f567d9c25ce00a9f15930c0af2bff726ff602803f6ada601823a7fff44e25b91f29bfcce96d9312db474ed982f1a450f21c5fd6e7d933e598148cfe94958090c7d9dbfa9a3f0746e281843e52b1f8af4221bf3e76fcce346de3ebd299d824e6867d89828bb0bbc9eff3f2e8861d2ae274ed0502ce45200f02aa2793977b9957c9723bd8013a97", 0x9a}, {&(0x7f0000001a00)="476fb466b1f97032981f65f0119f90d82541cf15b37df48f2405e7824774f2fffa90d7a91c8c753b45d241124321b947d77532dbf4c06b7b70054218563e12c4cc15ac969d2c238be57f51a9d019a2a6d67d905b78acaf33ce617c13fee851ceff1e828edcb6dc38d536324475da216c46c62a3605bd07537603476bbc409382732b63571ba46251b67748e7034d14808396650a9902d81fa63632ec20521fddad0c2c2cd814b5b2b5e5c388cbee177a39d5c27f76ce9c4aab5964658598a49a35cb9df47580f502795eb938ce47eb57b41b56453896e441151770b8fc66a89daa42da910da05d1bf97fa82a567d23d6606260b7e8a108d648a510941b22be036c77ddb74917bcf2e39015a06b2a4ecb1f0f8eb5d99eeba054e519d47ea37aa70d5c597bc8d070e627d2d6e997e017d6e5bcbf4b863ca34fa1a0fcc9a0126eb8cbac327dc053f31bf99364e48edaa9fe5f99b588b690acae15cd6398445012e2c24125ed93eccee0e96ab3d3cd98429d0b3422fa51bc34321d22d23dad5f616f7869dacc4f65b4b3c6c00f6c051b0643997a466aa45bcb7543a9ee4ed357bacfb287bbf91790facaeeff54042abcc1556cbb11ad54ae74ea3f02e7491b578271fed461c11b24abbce7dc72bf1114347e3aa1d0b505e5d6739e9f2cbae2c0a11c17634655b8a78de6c255824b1915894f9d9f91004b2cc91de7e3ed3b3c31c572afe2540508dabd67ad307f447ab4364a01010c5e4811f198ed7ed01de74eabd30a71c086651bc0abdfcbe2e808ec866579a6347d624e4ef969b38291b386d40abf6bdaea2efa29a8526fe61dd8a3bd964b6228cbd58ac62ef3fbcdfc73132ff16d1300668127c345ce7abd7537d42837239157d86a887cf3e5d1ecfa47c0973d2de3de3f87c6f77a045f35165f67a638e5ab44cf8cbbe125b909d965ab17e0d3584610e397c7e6b1f49452be6776fe904d43e234a6c7c4c92c6b1253ed7b8bc174ef49ed6430e64a2172465c233cc3c837290b667f237721bf2e472e00a496a7aa9ef9eb5968368deae7863007f74025b27d6ee05791c7341df441a39d38f2365ccacc691501de7e02ab6bb92954acfe477262cad3a42568c0119604dd1f4e6c169ef581de3d136af6a7b79e64d2a65fee60b7f91d495cd5c34f83df4eb18a31a85437411ebf69477912ddd80fd65d346d2023c28b36d0724d6304023f97a6290d291a72e3927ca9bf089c3926c2df4f00fbc9d9056dc7182be84e3c18b17b35937d0d1fa9da6fa4c5bbba83db5f977cf9ed2e647c2a16991b0128d528cd2072e51728042280d6dbb81dee67405416406d0dcec7744376fc7e582c960e7a58c0d27230762175a7ae33df3ee0eb301896f597e99ba99862046cf4b0f4bb84ab3c3212f55bcc33d63ee2ce9b4d4a06e83022f0099e4725dd7a37d9365a87c1c7f2ac6e778570525bb63372f96b5f5e8e5ef16d77201889ec1e81e9f48710acc6aad3a8337eef7f610c4432d1a718129d890de654fa66b5b1b20a23619a5e06efbec335b66fa0ab301e2b459a9cf4d70127d03954826de8dc512a674d1a0ad4480d17c1252c9d499e7ea3cca77eb676e1a82b19876283d42a6a288f258488d295e9c1c0822ff4c518a6e30ed157289f17f4dbc8fb6f6ef7d4d957474d6e0aaf6957e8d4d75d5ea6d36908011e0178e5646bd40de3fe8ee8afc9d68619617b704583546d7450ee388945773ccd646a36b17c52294b9aff9d688c7f1fd986a1836d4579d4d67162a1136763a10a0f5c62bd90e776e28216ad599047bb3446652ad9407632d4a0652ed6d10e89979dd0855215368fa21d4d351b872146c5e7e7ea1f034e3b5bdb51fed40d90c84618c3d475fed4de0eb2a266a1203b8c61d14cafb9472707d2ad639d429b9a905369929f2ba13b32150d0068df4e136ce837d5e60e5df19ca369834b67dffc9620776eb6d38f7f7a8cf9d1c2b15e9039d1859d04e2f847209a66a0973f2111df2e8a562e32844978b9a079519bdcf666ee1f09b2d0bf4813091a2fd83f4eeb35205c4468e4d6770c9763942f1921cc0d035e981f0f7195ef7fc6900b916ed272c040235ac0457e1d4779beb650b42ec578e615e66c45f95f49f4756e422d483aa3b5e539ff6732a839529b793a2e698c7732dd7cd4a2a8107b0403ec8811ae3623759a7b6b464e45fa49e4dc2a552a3b20a617284625876605c492f4e44e666027b017ff81159a38d60574b403400240bc029d6f10a711ca39dae579a483efd6daacd734e0db3831a51ad340177975d0eada2a5a92d710b2b786605c1e13c00dd848966445ffca69bdbbf37069e8c9f11d31233461a638b3f97b7832cff69161e1e9973b8ef0df9b1b011b5149494473798c9045ecf6ba00e85a4baa70c6219003e2f70adaa1f99d9677020c2a69b5384f2a318d75fc989d3834ac32adbcee738cbad47ac73a8a1c51039bbb76b9fef7f64812b9448106014d3b3fd65d34c3ff1da0852cda480df5cfb8eb4a47997595a8ae644f90e83b0a0697f96ee2432f878def1841e8a9b08b0e09ecb2b65e98c7979ee6e0febfb4c396e9816d22a191f79f8bdcc9a5984fd2010462fa81636e40e6c8338445fae971a939a6871b67e20c5019655b00f81df34d4f883f09ec3f241d3fd7b175560e0cd10b48a91226030c6dbb607d6fc866b3d005bc7ce4405985f4c033b667943b25450fbac77dfab0100ae0059833358446659be11a520a83f2322d995083b6f7b1497e9e5dede4d997dc0c2cbbe72828cf0ee8c32af883330ac7d8c90667cb3e9c071ac269ec2700d6b0bee0041df57724960af75e913df6bff82abeb6720e5b2582f19bdadd88992c824d76453d8ef9c0a1c78ddab2539ab11e265355ec235b170ffe912b9833cf95f2ed16482508f5d36e9ac7128fae5133e5260e27b27d9830529f157e2188d15808baf8a6267ddcfb3c54a0d222506709ddb571490e9ff899c77673a428c99d11f5cc0133eb78a322c444b2e1b684f3593f2d9539fda90998f7503c1051b722629ab7bb42f8c39c0955b5e773fe3c6123b285e4a7a3f62e6c7762f9a0cb4aa180360bbfb4cb01cc112bbac3bd08803b6d13a850163f4400bd214b15869d42e05d9f0a61792cbbe79ccb1cbfb5d762b4c4720766be93f8dbe0566e45e23db9910c525e3d0f063235fb57fb8a2c52b6191d07d3f241aa55a8709f0f3cc655239fd7a98f654ca652a977269e43e52422fb13b91293633bf78ee11bec71fda1d4e49e9416312df7e5c1f28e110bbb954e6b1ebf237a8c45bda52e071bcd74cf7d22ddedb9a0d6623d99ea33ed5b8b381f7fc8a11a743c272d7f2a377c2bfd06e54f85aa63e24b911c94c752b3c0bb3e9d5f45c05a1b921c2783a9babdb39425e50c8149586e7de3ae3517a2e402f26fe97fb9018098ba01ac8732f2d7230a158f3401ae8f4f8940f2c92f71d95d7a03398b87496a9005aeb573754ad142df25ea8d8b877803500e5d374d0da98a1e72dd66fd9d76bcd7d03bc8b8a714c5d1dbda6e2280d385d586faababe512ea2923973e85cc8514a4a341587b0a12c2082703c623fe0d6c26772f9c0d0c81298ed0d816d10542e0e9029e03f3f6c4fc30c9fdb9d81fe5ce7b8c63c79ccade176a81d4deac775d1c98f83581c80d517bf7e295251bdda0279882bce23b38fe7a5fb2c53c1a08ac7013e4be621cdccec83814d24c02161860b1cb21ed20f1c456de51a1976eacfdb8ce6fed33a3c6e3de59ee0d325132d7a3419a11faf14381cf42427719f2a7588021fb7cde87b7b863237a41428774fa26be38dea8c48692a9465a7d9912b620d85e28388c90a6e57d8544a14b81544a9d7c7d52d837b9fdb3f8631844ccb81db201fa17f52e9d49badbd6954000b558b8b49a6c441e6e8f87c40e3dfe21a8647a28ccb567220edeb2b573c41875918c39dfa670538335ced0cb886270d9cb4e23ab6a77ecbd592207c7d1b136b5dc67bc0da4ea3acf0fb579d3937dc22cdf85a4617367441d0a0fc1552312e0300ab46d22cb2e31d9c4977dcdadfcb22cefd0e1d2ee2a2d814a74c5cf82519de6aa6ef917668e3588ba1fb3ec5a0fe50614a97b9ba95903090c63c2f7b2353f2b84dd2aafb330dfc2b5d19f73a75a2cf274ad63e8ff3f3f020c11f69ec0645406ac482ee25e9566127512439b43fa09e3a2e8364eebb708df40b190af2ca9024475996b697abd00de4467a0bb22a3e70bdb6fddb9a401fb93f46d91d9de70998e25279a95af2f2f98139f3c29c5554f41814e12ba61219f36f592999c54423eadb1f7edbb1b95e4d8fb6c59b6efff4c61df2291e89519e59d5578adf5b615edf852cf9f3208a1c4fa67e3407aa438afd32b983e8c486da2e2e3d58755ae02a04200655a2b5c1e132930f538e4ec6298adb61e59116324a93ceb86a0a4d0741fb03a5bf658018a383902740396a89823a2298b57fcb569812b4db6507dea14e704ece22508ff70f5cee824ce43cc90e1b689a17623e535f9ec1330c98208cd7609929c46e6a4e17a78018770a964fd7f5db21c5c13a1c1b142e03e4a576d90fc20fc029a026fd9d7faa4968fe250c317ae412e67db56ae60c6c122c08ec955f51ae27fb177cb9ff23e15c3afd350f76241e7a54896128eb7e75076c3b66b07dcc43ba80d4b9809e625c99ed8f419ee55f5cd895516f3a7268bbd79f29e583a81a0ac7d9e0f3a6d509f9a0870110dfae2a51504d0994afed0614421bf1610e439652be44cd9f98d8b11726b9a9592ad2348a77a8d27e0c3402208e2aaaca804d82a39effeff81b6a7df0abb522906414debff5d0760cfee48925b0a3bd447de4dff0ae599fce6f03991e1c78ae3faad40c78a9044986f438e00dda979f256adc1ec6bf6c44251160fbd8491fd767ebbf965d9736e3410d163c5ecc656f2fb01e32acbab33c2a2d64a6c61942aa567539611ca789e445b73e3e45e668e421790ee9c8c6bde1b0c36701697619668e8f5476ac74667b1b60ba1ff4f0c627038a5fd0e891588a72b78a02cf9941107b174eb7fac72f6f902a1e926d7594e059e1c32cb8e39f3d0d3f3866bf25e3414423f465d10893742103501450c2ce24e81a78907ccb09a80c87996e301804b846b5f26bab33e9eaefb98c481a30c08eed8d15ad53f9436a8bdc59b3c8e629999acf465b74ccad893196754fc57b7b1083ff439a0bb9e8f100194e8b0759c85e00df7b179984872e16a88d31d67681c38e59af0402ce5bba0b7826dbef5168d6655ee5a770ac4082766fb52fa442436ceea9d6b34c1cfcc70bf490b6639f05cff8a1ea40cb623a8e92c23029723b21115b94f5883f3ef809db55041cb092daa5bd3f947773d028fc3510523844660e39e355efed9060e2c0b923183a286c0b5c66db802b02be6292968ddba816a44ec7f97ad95e881477466d2da9c8ebd673b9fc8b6cb73f9f6144a7e34b9478db3ecfe6a375929dcc10002e103741608bc003246e4e870ac1446ac0e7f61e659c537b68b48236162c08937b8e1be8d207c0121dd2dc6285e95ab2950e35059b68001f2d42d941234eada13016a07ef05c8c9be0221994ea58c38d90fd1f52cd135b395c4465cdd5de5216b6ff599468801fdafe509e397bbba0c9c63f8a575a1a0c3366b2d18936708c48ade0dda5db6964d3d0f38896b91c92f9b5e08db677075c4a4ddd81eaef24f1f8ed965b5e35ead950cc2fa16e2133787efe143501e75821f000895e6b26e0144e1da60c3a71544d7615a2fc4d84d75423dddf6", 0x1000}, {&(0x7f0000000400)="ddb2b1c851e2ce5c5fa8cb00b2491c1595ea53d32ebe5f601f8bcfd9b6befbf44caa532fb75257dfd7112081ef4a51a9231cd5f3b1a2216f4372b70e8302c4226b2c38d743f3728635bb7124aeac5b7a6bcce82b77c7d0d358b98cd8a20796e66e819f3e0ff8556152", 0x69}, {&(0x7f00000002c0)="d64e43b7ea9543311a8ba59b6b2dea4902af131be8174a668c2966fe3f", 0x1d}], 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x10000000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x2) write(r1, &(0x7f0000000040)="a8d4bb19588f4016351bedc11ff538c5c271dd0879de8a49eb1e67e61c7a185a71a9e9b17490e09d075c3eaa", 0x2c) [ 475.123746][T30703] blk_update_request: I/O error, dev loop0, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 09:25:50 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x0, 0x0, 0x8000000}]) 09:25:50 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x2, 0x40000) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x40000) write$P9_RMKDIR(r4, &(0x7f00000002c0)={0x14, 0x49, 0x1, {0x0, 0x4, 0x4}}, 0x14) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xce069d382f4b09f1, 0x0, r0, 0x0, 0x2be}]) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000180)) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x100, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000000240)={'erspan0\x00', {0x2, 0x4e23, @multicast2}}) 09:25:50 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x4800, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:50 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:50 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x5000)=nil, 0x5000) shmdt(r2) 09:25:50 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x0, 0x0, 0xc000000}]) 09:25:50 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) fadvise64(r2, 0x200, 0x800, 0x0) [ 475.524944][T30735] blk_update_request: I/O error, dev loop0, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 09:25:50 executing program 5: epoll_create1(0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='+e\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x1000f4) sendfile(r6, r8, 0x0, 0x2) ioctl$LOOP_CLR_FD(r6, 0x4c01) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) r9 = fcntl$dupfd(r1, 0x0, r7) r10 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r10, &(0x7f0000000480)=ANY=[@ANYBLOB="1480892bc6b927951d631b2e1bb04dbd975c8bea5d3b8d17a623f95815662f32d501e527a95bb31b86707d74615b09c84bc28f78752003665751ee797479e7a12e180e0fb68fa38b841e580c2d49023a102fb1fd57696f85b62d2a9d17071ee4e20d599cbe66f1f364d51577da0fe8aae4c2a745a6480355b9ee5d7959d8267e4c656212072b0cf85031a7cd791ad8cf19fa7bd007c8301c17b15a4b4e0c3a2d4d616b708c73214997"], 0x1) ioctl$UI_SET_MSCBIT(r10, 0x40045568, 0x12) r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r11, 0x0) setsockopt$inet6_udp_encap(r11, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r12}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB="2c7766646e6f3dfca222ed2887acfd8fef01cd61023d8288f0185b0e5dac1893f987da95c0c3df5ab7d0a1b387611412562e2afb", @ANYRESHEX, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:50 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:50 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/h\x02\x00', 0x2842, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, r0, 0x0, 0x0, 0x1}]) 09:25:50 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x5c00, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:50 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x301000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) 09:25:50 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x0, 0x0, 0xf000000}]) 09:25:50 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x28, &(0x7f0000000080)}, 0x10) 09:25:50 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000100)=0x1) ptrace$setopts(0x4200, r1, 0x4, 0x40) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:25:50 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x0, 0x0, 0x1f000000}]) 09:25:50 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x134, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x780}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4b95}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0xe3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x47, @local, 0xd7e}}}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x1, 0x7}, {0xf8fc, 0x2}]}, 0x14, 0x1) 09:25:50 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x6000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:50 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:51 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="5657d3adc89d18fe784bb79934201780fe9e3e1f9cd4f124d8b233a4c7ac422d3decc5514c8f7288380d97e6769e446dedc4f15380c473168d6024a71068b0e80aa798a23569e23fd6df67940325ed3ee9183907c8fbabc0875eba84f794ea44bbccfdb8665ec5021385617532da824cdf9b3d73d93bc77195718e30f215c356dd7b624cf3a92c50003d5ca22c334b1c1f88f647fc483cc4414b970bbf06041f119882eec4a610fb9cde6023dd1c0969d6186c255344f930ed7eb631a06d97f7420c139ea8a5825e8e2f25cfbba0a0b26b3c3593fc494e9a990baea9e6c13c6fa5b21fca421d5650a37fd4b6a49fd3ca931c27d7bbfb8d25"], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:51 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x0, 0x0, 0x40000000}]) 09:25:51 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000000)=0x56d) 09:25:51 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x6b00, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:51 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x6, 0x1000f4) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000340)={0x3, 0x0, "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"}) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) [ 476.446281][T30792] syz-executor.5 (30792) used greatest stack depth: 23800 bytes left 09:25:51 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x8a03, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:51 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x0, 0x0, 0x53000000}]) 09:25:51 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/177, 0xb1}], 0x1, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000140)={0x8001, 0x9, 0x3, 0x12c0ef34, 0x0, "3cc46892cf2984c961de943997dbdadadd65d5", 0x80000001, 0x4}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="e21ac7a32c1dc04b8a9351b9cf11bd204108dfad9485f9cf3fb7087e8f0637852d74266af723b5eca6938341505d2bdfe991ace575c50016ba6ec661b99ecc6d7152565798cd01629e06cf9f5f6a42ada2d71c2678779be2738fa23b92a68a0db7629776c8916c24e5792f", 0x6b, 0xfffffffffffffffc) keyctl$read(0xb, r3, &(0x7f0000000400)=""/139, 0x8b) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x200}]) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000004c0)=[0x40, 0x2]) futex(&(0x7f0000000000), 0x3, 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100), 0x2) 09:25:51 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x12) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:25:51 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:51 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x9203, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:51 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x0, 0x0, 0xb01f0000}]) 09:25:51 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x400000, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r3 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r3, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000080)={0x5, 0x7}) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x14) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000000)=0x68) 09:25:51 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x800, 0xfffffffe, 0x0, 0xd, 0x0, 0xff, 0x0, 0x20, 0x3}) syz_open_pts(r1, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r3) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) ftruncate(r5, 0x8200) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r6, 0x4c01) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-net\x00', 0x2, 0x0) r10 = dup3(r8, r9, 0xc0000) r11 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r12 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r12, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12) sendfile(r11, r11, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r11, 0x4c01) ioctl$LOOP_SET_FD(r11, 0x4c00, r12) r13 = fcntl$dupfd(r0, 0x0, r12) r14 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r14, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r14, 0x40045568, 0x12) r15 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r15, 0x0) setsockopt$inet6_udp_encap(r15, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r13, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r10, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:51 executing program 4: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x3, @pix={0x81, 0xe49e, 0x20323159, 0x3, 0x40, 0xff, 0x0, 0x1ff, 0x1, 0x3, 0x1, 0x4}}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xffffff81}]) 09:25:51 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x0, 0x0, 0xff600000}]) 09:25:51 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xac, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x10) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) [ 477.118216][T30880] blk_update_request: I/O error, dev loop0, sector 520 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 09:25:52 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xaa03, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:52 executing program 4: r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x12) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x10000030a}]) 09:25:52 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x0, 0x0, 0xffff0000}]) 09:25:52 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xb803, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:52 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:52 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xe, 0x0, r0, 0x0}]) 09:25:52 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="afc0f8ec98f7a4013f9208c14ef0f2e3c364472b2b8de743b63748664c3f1c4b07559cfff3f024cc90c0a24b67003f50ff00aa6e7afca1e7b995e45eca383a3e0be78bf2e51fc747c19411074466868fe1"], 0x1) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x12) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)={0xe0000005}) io_submit(r0, 0x0, &(0x7f0000002600)) 09:25:52 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xc702, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:52 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:52 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x0, 0x0, 0xffffffff}]) 09:25:52 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0xe8, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e0f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x28}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0xe8}}, 0x4000000) io_setup(0x1, &(0x7f0000000040)=0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x10100, 0x0) ioctl$NBD_SET_SIZE(r4, 0xab02, 0x10001) io_submit(r3, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:25:52 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) 09:25:52 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xd503, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:52 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:52 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xd603, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:53 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x800, r0, 0x0, 0x0, 0x4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x215, 0x400000000}]) 09:25:53 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000400)) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r3 = syz_open_dev$midi(&(0x7f0000002780)='/dev/midi#\x00', 0x400, 0x4901) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000027c0)=0x9cce) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x40000000000000d0}) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000140)=0x81) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000002740)={0x9, &(0x7f0000000240)=""/186, &(0x7f0000002640)=[{0x7, 0x9b, 0x3, &(0x7f0000000340)=""/155}, {0x5, 0x41, 0x2, &(0x7f0000000180)=""/65}, {0x38, 0x0, 0xb34, &(0x7f0000000400)}, {0xfffffff7, 0x5, 0x6, &(0x7f0000000440)=""/5}, {0x1, 0x1000, 0x9c00, &(0x7f0000000480)=""/4096}, {0x2, 0x5d, 0x4, &(0x7f0000001480)=""/93}, {0x1f, 0x94, 0x7, &(0x7f0000001500)=""/148}, {0x6, 0x1000, 0x6, &(0x7f00000015c0)=""/4096}, {0x966c, 0x2, 0x7, &(0x7f00000025c0)=""/2}]}) 09:25:53 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2842, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000100)=0x3, 0x4) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r0, 0x2, &(0x7f0000002600)) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2c, 0x4, 0x0, {0x2, 0x41, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x101000, 0x0) 09:25:53 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xd703, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 478.375881][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 478.375890][ T26] audit: type=1804 audit(1574501153.156:632): pid=30991 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/737/bus" dev="sda1" ino=17803 res=1 09:25:53 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) fcntl$dupfd(r0, 0x0, r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0xffffffffffffffc4) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:53 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xe71f, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 478.487639][ T26] audit: type=1804 audit(1574501153.266:633): pid=31007 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/728/bus" dev="sda1" ino=17830 res=1 09:25:53 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1, 0x412, r2, 0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) 09:25:53 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000100)) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) fremovexattr(r2, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r3 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$RTC_UIE_OFF(r3, 0x7004) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r6, 0x4c01) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) write$binfmt_elf64(r6, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x97c) io_submit(r5, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0xffffff81}]) 09:25:53 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000002680)=""/160) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) ftruncate(r5, 0x8200) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) r6 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) r7 = pidfd_open(0xffffffffffffffff, 0x0) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x20000000000002db, &(0x7f0000002640)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x8001, r0, &(0x7f0000000100)="3d3672fcde6cede785bfa595e18309b34e6a84eadbf6a7738c34477fd3e4790513b4c4a1147a50fb6c95c897133aa89df566dd0794678bdbaba4f14c9c011fb872cf63a2b1085f553c15ff16ff4b84c5a9077d531abcbff87688912a4612916f6fbafe037de5d547c8090c8aa192b75899251009fea6d70525739c2ac4c5cbca084aad709e8c5c87a74c2b65bd1552", 0x0, 0x6, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x7ffc, r2, &(0x7f0000000240)="fc2dbae3c06e3cea694de62c707b0f57fcab4d3efc722cd2aa69b054845e838a97d687969f1c084a428edffd1bd3d4f3f0bcde3645ad36d2eee6c50cb80d5dfe83f33bdb6291b2235c471124e40c958d64e9dc70484bd8850d1dab7598c42ebdf782a5361ec9c6672a915d7585f741fe4b528659b3440685e3c4f6708b76117e6a3bef5b3943b5ff53dd8fb23466e098a622cf7c3af55664e16fab6c73662b0a5d21b4f9", 0x0, 0x7, 0x0, 0x5, r3}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x5, 0xffc0, r3, &(0x7f0000000340)="42354deb7c16ea7118cfcf7e175fffbda235509dfa066fc89c01a4eab1342c97f2d41675f1e29a9ace7e2e39536bda7b1b77c3c9cca83af19ef26d5742e5e7f5cffd35ba47a00100b413cec60d94f3a6c01e94dd37a556c8f4f6551bb06b129be30345f55c1ebe2f11174a15a11d58fd8516b2390a0bdfc1e6658dd5dcf17193aaf9dadb92574998cdbc57e68398cf9205c279912c1b64e80fbd8fe5ab554d16d8574f74a2ea96035fb2e0b3fa4a35b74846681b025b08db4f6402f17725624262dada529b5c479d58550d58d1f992ef66580805ca1d0ea375efae9ec17c4dfedf8f4a5ce70d7963e252ad92102e911508a4c7918780af95b7703a09d6e5d7318a2f37ab3d19b6962d65c8ecd0728297d0d9adfb0a192fbb6839014efa22803fba9a3e0fc5ff3fe503888f264d5aa1a3e018e69130b66211864a4ed07553f15663036c1c7cbe8bcc582825d45b7db351e61345bcd3555c7211b5c6264f57b8015075ee205693a107093a848cd70f6fec1803b66e9491fc63d3833680dbd13dab528e3671d7d9b96ae6cd1692c4730f860a2afd477e1492cfaad657592a88997db5f7890a48b5bc87d134ec082324c50a015c10600dec3af1c4f0749620996d048c1fd164e6dcf751e31e34f0059928d5393b6c997b03d98bd0c2caf81115d490135dc5c3b783d2f72984087a1042ac694d6397e14f5a827e9e0b36a47cdb6862947b57f681d38afc42366c1a6e68f075a81f39ec7a70aa8b6fd96df864352db0003b49bd8c9429adad420767f552edcc5638047e2d5acccbdcb8e1349765c3e2674950ebb8c2c267a10b69b48d7464454601697bd8b5142bb912ab3af7b7e4f68734fec2d3bec67441e033dd864e145a37a013e926c55b3d08ad2536c003a662c02e78a8512f2ccbe102bd8aecb64d58231558031a11cb575c53255877ab69de833fe545e7801446e3799c64ed1d2f5a9b49d5c1af9e7eb17d264f9d7436c0a90d46516c7ecb1b4c080e0515b37996f21b3e59db6fc69dddb770f411e2772dd3cf1417fff1c49ca64728a84d91e0a8d9528ceef1df1b6ce2b4b86ab3d05d5985c19dd73acbe55ee2307ebe30eeb193b0a8fc965a5289aed9614527e340d0aa53508372d449c20e03e17c323ef2f6249409094113db9a389e9c5ce1c9e34250cd5ba094ec8ba7beaf1e8a4af163287bcb862fdbd76b675779d8dc15409964a5ee747daca7958f4c419182ff7cac794fb5cf343008db02792fae422e2e00068dcff575afd8e866ab5fc598d4739062a6867aa6c0a95eb340b21530d332dddd0cb05c8f32d4c2a5de2380812880d62bfd4ff2c9fcb89b43f225fca99fecbca61f7fcf896a2b5450a687eb01b227ace322d9adc4b5e6fe7b2fefcf3f8fe1e7f124e98151b030b5283083abcd03b884f2fd37fdcd5b95138394477d9f82d2d62b5d5dd1db9737a79ba23e17a1c18ed896685ae1d1fde52706d622d2a414dfca5bb61fd079607d3649db92f796362c7d68a6e48ebc1cedd8234edec5ab754354c78637f2ceccf897ad926223a5d7f10c90ab9d30f381e3470e255cbb552ec7cdcc8a0f46dd265cabf5649aaf45f684a88ada4d0eae6a2717401abb1bff7b63b1da2a4ff019f2bc9d04b02772b6a92480eed3e307faf3dd33b5318718a7cc6cd853440ed0cb92796b201be2be7fe460a6422252b1c50b0a8ad6d197362cbc1f38ba228484f08bcf7762b833053087253bd101561fe27391f1b08eae351138732a5246e307266c06152a4611f28cca7b97344947ffd954ca4281808cd7d0267a64eed18077e213421527ca77c019046ff00585f9a7a79c46d6264c2064673e35c4994075a1323e7cb04353df31d8b9c859604ed15d2955cf43d4279203eca718a4aa3c76f8a6bc0eb275c995076ef80623fca1d9c4e1c0ac130490471b8e58a74f65156c3b082e4dc8a5f055db79851c79607c330bdc3778e659cfc5dfd629365453de2bd18183b4e92643fb384d3e6e5ad56f3359312ccd57d5a34d83547f8d66d0bc2f849be77f84f165501163993095541fca3eaba2fde1c39af3bed4bf7ec54b3197d05e6ca19ad617621a35a868988870f1b8b4f967d1f0926676345e882cc8a0f7cccebb5cf79c1053470a84c8d5d1d9c089c8cfcbba56dd5c41c6bea858a4e4a5d731ad167020a4010eff51fca6613ec34a739bae86074dc7216006c0160f84558312d3f1977cad3822178eea19e672ed3a57193cf7e032231fc1baa1b97d49cf230d5a0bf87357d26006a52c0aa1e23943543bcf9246bc47358940ce32815a73b45b186847b642a7e9dc1c313eb7c0f63e38ed55549fc8c3faf05950772f7f4dad6c596ec1c2ebc65c1503a69ffb386de8ee6f5bd7370509a6ad909235e10d61022629c47bea38c6f25a468b1d126eed23067f2e8ea94e20a53f2a66fc206365a864084df3465d4938b5586809a09940453b8584e1b491336296995943c3d8600aaa71966b8218041d2058df7700aca7f1bfacee11292428fa13765d1c1adfa98c1c423aecd5389cdb262765ea7bf7966be33c37ec41b8db2dca1e89b7c8e6c2b4d54312113e3b52f7a98541921765a438f6a3c5a1252be3495a8bb93d5fc97a13a75e2e673ef125afe93d52d503c548a877d79c8c79ff2fa38680091adc22591c569651f75dbe7c6039f931d4b77a021a51a2ef8e94d6a70f2712e0ca7e2d61297db49e98a77ffa9cb3b9b2b0c601dd77033c9c42e955efb3032ea751dc713113a4fc21d1a1cd0c779fb4b48fd6bad242c2d23dc80b3153554a0295f1337fa9f5515348d47eff2a9a2b5ba4c679536f42dfddeea7c20c3d2061ebadbce7cc6ac1c9ef6faa25b0c981a004f32eb2f631913778c86c0fcf9c599cadbeb0332f3043d93f30e07779358c93440bb13be41e552e1923fe86c9f6709ba5ecb01b13c7f4d884d60e04a4d311d533b71227b99f76ad3c1403a3a5b2875631b20a320e3172f3529b62b27972edce22618a16205342e2731884449b33eb6e9195f6baa99d79568e47bd317a0d2ef582266b589f6ccdb7051c594424e0dc67fa0f40580cfd15ee42396b3bcdf8be9d122cc63c6b67b942b9ac7fcbca9fbb56547330fa9524ead10e34109abbb5f5582f39493415b5854e738f688de80295b86ee635ea496f2d5b2a1af30bb31a30717b414cb129bde2e3a7a7e89c42f91af37bd3d446c600db9c4e9fb19389685324088ba8f454b4583025c6a7af2e577711333ad53c13f857bbfcf3b3a4d6c1f69f28cbd11e205236c308cdda2f981f74b7f9402c14a18c835d7c0d695cd001abc804ae8d4a5b58027a5d668aa0370669aa2f767bea88c44ae844a8961ba8c2d2df35a9b2b6da00f11fe164c486db7386642c3f7b6ac0ac6f851d5feebce1775913d37c11ee501581b58e7b89750ca8d84d7f3aef521b534110c9165b94961b8962a88c27a6fc44f4b9b3e45f961e16524a564f8c90b67f0f177021eb70f17a88f8a92a76f6423d9cc26e9aad0fc95f3b76624a156b8e310b1c9f6aec270a493c8ee9429eb0ed64c0d04ab8aecab2c342425146bf7913523a9782404f6797dfadd3a62c99d5233e041739908806823d6b82cb5a671a2567595552f66874bca6f62bc6c3108f0e56bb29f8c5ffe4f82b0cf93419fe50c816a48a0bdc4cd959324bd05bc0ba7f83e36c604c24d0769af0639775c09659b51d22f2e9088b3a69b8a66e9e5e28711b19fcc2b1b1b766b7015f809ee5dce2e71dda304fc2db3ebb6707ca70dd7b5f8816db89a81be6b7b35112ffff849724b545ee058b9c802d481d7d0b049162a8f192017e25ccb900461d71bb15b2be36d86f3846541596d8080ce575abe166ade3f961822ff56686a4dde91a8ea0e42093bc942b0a2ccc281df754be9dcda2b4d85be81038f8af1007e6b0369e299babad0252020ab6f47bc37160546f18822be1cc94f444020c1a0652360246d6262ff90e10124c492a44bb77959bbb158e7dcfaab6cde4bb835077515e6512fbad5aff3cb2e643ecd0b2ff289c883b81cb280eabfa4b32f3798fd37326c7a32f0780805f7fbafffeb75adeed146c231eb5eb0e0d4d47b990b8ba92e1cadaa8739a3c6a72d5f8b564568d27aea0874b6f04fd351ee1e2fe2af1745e301e010b9cf21cec0b7358971278b7b95e1a17ae8dcff37db8bf4b6b163cb734b2c8ad817f7bea6d3b7a4626bce861c219fda764c8699837ca8e1aab199b714b8f7011b5264b2759527e7fe21eb247fdfef0bd969f8e3536147222a694a1d8d0f544d3f88c20be081a6cb226948d462c904958c2c5d098f0a2bb06e6694d139215bbb7a4fba839abf0e305152f73fd948f4adf2cbdcc686d96d17eadfa59f4a3f6edf7e5d1811cafdbc65638d0e28d9ab3e047a8b0ab9bbfbf0cfd9ff2b68275426aeecefbfbde7b48427d8b825b106e8047ccf33d042bbf8477b84b88043997496fe0c68b39db536763a03d21057460890c909db903a993269ccdbeb4494eb833a8d5a14ac0cc13d9a9ecbe4a044aa6a90079c1c51c76ff596cc07c678812a81df690d844e684109faba854f751a670db20660baaf196046afe2bf7de229f6221999b8c41aa51b611fadedc875757d85359e0ef3086d43d35dc279bc9d5659810fdf0422ec4447a241afebe26c2eaf64e0149645a3511500998917fe094d4639d4c5e0b81fca80828e9101c7d41561f788b66980aa88c330c7213fb7bb517da7ea9d97f11de602501c1dcaa792276ecf7b58ac58886597898ecff4ee7e0ea744aea7e71445c599e11c217b3936e79f4d697d9065126ddab103d867f979c6163a4828da2196cfe39cf97c30176ccbfb12de52bf6550809850934475cc1717dc5bfee1f8c4a1302e6450ce0ba8e67497655bce3576c73ce780d24dce038dad7becc70a4a9c9469cd57f136bbe33c266ffbd8919af8d2ff5925ee664390cb1e3873bb5c9daa5e75c09d963b48f4d6c4a4e03a9e50b903edf7097f3f909cdfbb587f654647ce14d72e0b18d733a13808ec4b327ab7d112141fc39708615fbdef69dbefb82c9df44a24dca50bf4e674257ed6145b0277419337297429429b7ee8de58f89418de43202dfb28c5531adc3b215cb3b40780d461474972367704c52f36c30caad17e6468e73e44a1394dc2d0c7abea3ac4442dc4cfb5a18a98000a7018faf8e3bd5af8bd1ce8f1553b6f29531f1ad83af4b6f82d9940b4e44bd5a6a6fb69f24cafc7772b7e54c5f6c183e4e0b31a60697cf38e6d2c2f343acd37111dd8be1438ade534bef16ba8ab05e3b494858059863e2aef405214c375ff3c36d59b06f9e50a5e868825cf5ff24853e80126c94cc5282de4f7a83a6a72169d99c257ef7d84a30cb5d51b91984b2440d18a15f8770162a98584dcb4c7109dbc22628acba43ffef649632e1a8e2c47d66a14fd1bd25062dbb76480c4cf5479d7007a47987fdd1f1d2c5d0446d751f1b810fc7e13e6f787213b86f37bbda271e07135bc213bb7e6e3c51c0388f96e28e323748416d7a2f084cf796980c76caf328b091aac71dae2d40ebe475e46a3426c257c6791b1627467d3bbede41a311cf6b096faf9a8703c029cfa7db56e7f8bde0d156676b2aea5282d0eb4fd14cae53f828c3561b2478db2c9184e4840af64041eb05b422ba4adb0530f6ff54410947fa9dacecdb933b7d4ead2ed4b81038d6bf821e86959a94a6adf2ee8c913d5be5f7bc46d15bb3589d96e035c08f8761b0d122127a3ada30b6a499d65fddf565ea1ee5d66ed02c19df70352eccdf", 0x0, 0xeb, 0x0, 0x0, r5}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x8, 0xfc, r6, &(0x7f0000001380)="c10261328d4c70de118990b98c2bf5cddc073b6ba4aae793626eff91bc9d633447e5251f0567adfae8c07ca5141428ddc88f90da11db1b7a1cdef4febb98e37352d461a06ad721adcf768e87189a25aa21362599690d89ddc1482a346e122dd2b2cd3ea1d0916332df1d9a142ae2383c5710946c364c08e6114e9748ce99bec0dc060f3e63b4f3d894d2e329462ad62c2a776ecff721389fcf2a8e00ad9f64ea66a733af67379ce1e69bbf0cc5324ef61923cf21eaf4e945b10200fe0443ba0645024305fad103b8012e6e65ce6f560bbb0b042530a773e777", 0x0, 0x4, 0x0, 0x2}, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x8, 0x6, r2, &(0x7f00000014c0)="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", 0x0, 0x401, 0x0, 0x1, r6}, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x1, 0x8, r7, &(0x7f0000002500)="8bda513c696d96d12ef54a4c24e2858bb5def0a861d19d916605b89e9f640e24b13677c86bf4629255f4ddd81f0396922fbfb9bc60abf5049c6b74dcfabda0a34fbf469ac87cd83ff5a2a0091b160fe75ddc25c41bb72dbd6a6915201d2af1437a3ded3b76ba6e7936090bb162466db4390361df6b87bbe2760c5e00ecbd9a2ef665ce7d634d7fe9be93323f7174030994864fc81d16", 0x0, 0x1000, 0x0, 0x2, r8}]) 09:25:53 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:53 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xedc0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 478.744262][ T26] audit: type=1804 audit(1574501153.526:634): pid=31022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1027/bus" dev="sda1" ino=17834 res=1 [ 478.771533][ T26] audit: type=1804 audit(1574501153.546:635): pid=31028 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1027/bus" dev="sda1" ino=17834 res=1 [ 478.796347][T31011] blk_update_request: I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 09:25:53 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x5) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x14e) finit_module(r1, &(0x7f0000000100)='$security\x00', 0x2) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0xffffff81}]) [ 478.826178][ T26] audit: type=1804 audit(1574501153.546:636): pid=31028 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1027/bus" dev="sda1" ino=17834 res=1 09:25:53 executing program 0: io_setup(0x1, &(0x7f0000000040)=0x0) epoll_create(0x273a) io_submit(r0, 0x2, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 478.944613][ T26] audit: type=1804 audit(1574501153.666:637): pid=31026 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/729/bus" dev="sda1" ino=17821 res=1 09:25:53 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfc03, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 479.005907][ T26] audit: type=1804 audit(1574501153.726:638): pid=31030 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir176708702/syzkaller.w6yVdH/1047/bus" dev="sda1" ino=17329 res=1 [ 479.047673][ T26] audit: type=1804 audit(1574501153.726:639): pid=31045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir176708702/syzkaller.w6yVdH/1047/bus" dev="sda1" ino=17329 res=1 [ 479.068111][T31011] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 479.077549][ T26] audit: type=1804 audit(1574501153.786:640): pid=31033 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/729/bus" dev="sda1" ino=17821 res=1 09:25:53 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x3) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:25:54 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7, 0x80) [ 479.181333][ T26] audit: type=1804 audit(1574501153.816:641): pid=31051 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/729/bus" dev="sda1" ino=17821 res=1 09:25:54 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(0xffffffffffffffff, 0x605, r1) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="ffabdc803263bbbd50d5f8977a6a222e82582ea9296d1c1dd2cbfe3a405eca3669b0449e2dfeac71929edc51c2140f4a765e4bfeffdf67ff985bb136874e76790b20335e7eab1b71075360347e85f3157b388950829dfa730780a124b7cd90c3a2ab77e54016af6cdae854db0f9ce6f9bb06740b87dd064141e96ccf9ced66b1d7b3e3dbd68a6acfbc81c6cedd7aad9401dde3d783734d1e2dc9c83d6e100596917d88ff6d1373487e8c6ad452abe7e621a72e5489b7bdd1fcfedf053648ed2f1eca8c5010922d9a0d9f4d16656800b25c98601258c01ca2fd6fa025"], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d66642cd11a4d6b3388", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:54 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:54 executing program 2: io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r0, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffff81}]) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x10001, 0x0) 09:25:54 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfeff, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:54 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/s\xea\x90\x03t\x00\x00\xf1\x0f', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) socket$rds(0x15, 0x5, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x240100, 0x0) getpeername$unix(r2, &(0x7f0000000100), &(0x7f0000000080)=0x6e) 09:25:54 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x12) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) 09:25:54 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x12) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r2, &(0x7f0000000100)="505c7d527db3ce0f1ee19e0c2f256cef77d5735e0e686410b2eb24a666d84db2ef4b5d6e459ea38909bff94a3184d30c8a4f6d49c710d34d282517cbff0a11aaade2436ec625042131d92d723751dcb1ea87da0f186e5f57398b0537cb94427faf3f7e8604e6a40f887ac913a134d70b5eb6e94852f2bae98e168a94bcaeceedc6879dc1260156ea1cfdab1b798442405c807c3421101014b678933ad141f3bfba4fc09605497dd42de5ffac2c937d32e45b87a9e5836d078d451f1d0d144b19217e41c624", &(0x7f0000000240)=""/48}, 0x20) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000080)=0x2) getsockopt$packet_int(r0, 0x107, 0x18, &(0x7f00000002c0), &(0x7f0000000340)=0x4) fstatfs(r3, &(0x7f0000000000)=""/22) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 09:25:54 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xff00, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:54 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xff07, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 479.658402][T31073] blk_update_request: I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 09:25:54 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 09:25:54 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) creat(&(0x7f0000000000)='./file0\x00', 0x40) 09:25:54 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x12) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x3, 0xe6ff, 0x3ff}}, 0x30) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:25:54 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r2, 0x0) dup3(r4, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) fcntl$dupfd(r0, 0x0, r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) 09:25:54 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xc2000, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x0, 0x70, 0x8, 0x7f, 0x17, 0x2f, 0x0, 0x8, 0x40100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0xbfa418788901052, 0x9, 0x2, 0x1, 0x7ff, 0x101, 0x9}) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:25:54 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfffe, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:54 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:54 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, &(0x7f0000002600)) 09:25:54 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x92e9d744fae8d70d) r3 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x81) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001780)='/dev/btrfs-control\x00', 0x5c800, 0x0) io_submit(r1, 0x1, &(0x7f0000001880)=[&(0x7f0000001840)={0x0, 0x0, 0x0, 0x5, 0xd25, r7, &(0x7f0000002640)="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", 0x1000, 0x6, 0x0, 0x97cd2c6a33354912, r8}]) sendfile(r6, r6, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r6, 0x4c01) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) r9 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r10, 0x0) write$FUSE_INIT(r10, &(0x7f00000018c0)={0x50, 0xfffffffffffffffe, 0x4, {0x7, 0x1f, 0x75c, 0x4a0100, 0x7f, 0x1, 0x9, 0x6}}, 0x50) fallocate(r9, 0x0, 0x0, 0x1000f4) r11 = accept$inet(r9, &(0x7f0000001540)={0x2, 0x0, @local}, &(0x7f0000001580)=0x10) r12 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/dlm-monitor\x00', 0x8400, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000001940)='memory.swap.current\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r13, 0x5) r14 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/ashmem\x00', 0xd12ddd493fe81e10, 0x0) r15 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r15, &(0x7f0000001980)=ANY=[@ANYBLOB="56d2c5727cc05dcbea32e70d17391b89"], 0x1) ioctl$UI_SET_MSCBIT(r15, 0x40045568, 0x12) io_submit(r1, 0x6, &(0x7f0000001800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f0000000100)="bbdcb8d72a2ec7b954cd89c8b0458248fa821e0f9be52682d06d0b9f754dafadb9bd639242061218f3e2975b49ebeabb06e661dda0f8e3254345fc0b763256c504499ec52acc29e7638b022004de2d5cece15f76e7791081056b6f1f3ed295fe91d946baa5272b281abe233ef5da03c6b4795bafa326d5dacdd0666ba2bf7fa733e7bb7c4ee7c759f1a701eef97555baa5a4c6a9d49d397a7523b50d75276d6edd66ec01a2b92981f5cf8843540b1446a2a84de2040e84339bc5f032aa4f89a0b33388e3c3e290604d3f509b63e4f003406c43b7bac2c5d4b94b0eea5d5634f8724fa66779bb3c4f5194610e7f", 0xed, 0x4, 0x0, 0x1, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000340)="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", 0x1000, 0x3, 0x0, 0x0, r3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x101, r4, &(0x7f0000001340)="670bc43fbd944d6feb0d3399c8232508d6a92bf66dc493ddaba2dbda6f7f910665ab0474b8cbf29083b4e036f81f2658b2c1392205a5097c324a8a1ceac2c7f80d404558091b4e0767506fd785f6ed2a66d65190d2e1534b7be4468626919e685637311b9e60bacd8d45e4f05430b372699363f9b13d04fcc1e4a3c0214fd3a7c4f218c14b841d8dce59ace061388c7d6523fdee9efba1702c01904882ad94c933b5e59ca24203dfd84db89a8c273cf3a247e7bc06b93d7df058e9e5ac213d", 0xbf, 0x42c780000000000, 0x0, 0x0, r5}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x6, 0x5, r7, &(0x7f0000001400)="28d6a619f52a3dde3c73ece9f0bdcb05045c7516a3781c3439d0ad842877f230005787bcf5544e91261b95f3aefe8c856b9c57c0a5113e96c28921f0bc0858a5a7e54a951062f0492da87e43cf53a53374761b285cb940135d7f0e5c729dbb276c4a4cb121cd6b7507f21647462af85f773b7b42b465082ebf4cfa4ef6e7ac9aa58fc05e1304677d93929995da58b02db46c6ebbc45a45703de026e98ddf5010ec8171bac2c432806a41952a409e04ca79a2c9f8369734a0abc6274c1e8ab8f1ce619ed7126b29d4b2f008c398bf2860eb346a39e6ff04bd90093ffcfdcd6651d8e608fb", 0xe4, 0xffff, 0x0, 0x1}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x6, 0x3, r11, &(0x7f00000015c0)="c45f4f328a0f1d660be10585d2d581f94dfd37747c382385814914137d331f5e93bf537f01f398cb60c9d8dd7afafb37f4329d78bc69ffe76c3a3b3582a4c344167e53d5f3c6252c08505015b0baa57cf9eaddb286df2560a4ddf1994212e0189d0c634dfb8c3d6969c0ed61f26f955189b6ba738e55f1d842d020866b4aaebaa5aadaf775151dc797766b25ad0f7c6b694031645dde1d7cc5ff08449bfba091f819ce4917a780fb85661ccf42c5d727f202ba410e47d6aa7adf32b3fed7e79e28e2977de3f5d4040213ae", 0xcb, 0x7, 0x0, 0x1, r12}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x19, 0x2, r14, &(0x7f0000001780), 0x0, 0xeb, 0x0, 0x5, r15}]) 09:25:54 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x40000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 480.185367][T31141] Unknown ioctl 1074275339 [ 480.199152][T31144] Unknown ioctl 1074275339 [ 480.205036][T31145] fuse: Bad value for 'fd' 09:25:55 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xffffffff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x7ff) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xfffffffffffffec0}]) 09:25:55 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfffff, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 480.369077][T31139] blk_update_request: I/O error, dev loop0, sector 520 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 09:25:55 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x12) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0xca, 0x8000}) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2a100, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x7) 09:25:55 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x6) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r8 = fcntl$dupfd(r0, 0x0, r6) r9 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r9, &(0x7f0000000480)=ANY=[@ANYBLOB="9ad11edb36cc41ca424ebe54803c44f36025152ac93a6f01cf044ac4ce82453e3cf559db013e847ea1b64ab4214b9f13fd619ba5c4271d00"/66], 0x1) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x12) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r10, 0x0) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r11}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c776664e9b62a", @ANYRESHEX, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:55 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:55 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfeffff, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:55 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) r3 = accept4$ax25(r2, &(0x7f0000000100)={{}, [@bcast, @null, @null, @netrom, @default, @bcast, @default, @netrom]}, &(0x7f0000000080)=0x48, 0x800) tee(r3, r0, 0x9, 0xc) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r4, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:25:55 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r2) r4 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r4, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x12) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xce2535764a264961, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) 09:25:55 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x101000, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8200) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r5, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x12) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r6, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x13, 0xffffffff, 0xb32, 0x2, 0x20, r6, 0x1f, [], 0x0, r7, 0x4, 0x4}, 0x3c) r9 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r9, &(0x7f0000000580)=ANY=[@ANYBLOB='R'], 0x1) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x12) r10 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6100) ftruncate(r10, 0x8200) write$cgroup_type(r10, &(0x7f0000000200)='threaded\x00', 0x175d900f) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/ptmx\x00', 0x2000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup2(r13, r12) r15 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r15, 0x0, 0x0, 0x1000f4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r17, r16) r18 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r18, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x1e7, &(0x7f0000003800)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000080)="c125f17cc7de4a9254ecb6ba778b", 0x0, 0x6, 0x0, 0x2, r2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x1000, r0, &(0x7f0000000340)="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", 0x0, 0x6, 0x0, 0x2, r3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xffff, r4, &(0x7f0000001340)="efd297339398a1df55f26b42b64ad6af7e000c13032f3b88967504b9548b69102765725bf58eab0e6d06a1ae6e4f68b794d445a96d11e4525fc035cd12fcda93246edeab2164ac6133c804aa3221a979051427a265ee47b09282c48d9e446a47f9766f906c7cbe086850fe97920142c1fa92e0a9d49a0c2869f6193896da7bf1d8d6e570e5a8b2ec04992846d82944c7f6560caeeb5ea5c935ea0b6c066a4fdd67eb092cda17236ddd2f2bc74cb552be1d6c1b1d992885a5c7b3975ed8dc4341b74983e6ea3cd94f619542eb4ba19845343ba011a5a15f6460ebfb", 0x0, 0x7545, 0x0, 0x3, r5}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x4000, r8, &(0x7f0000001440)="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", 0x0, 0x0, 0x0, 0x1, r9}, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x5, 0x3, r10, &(0x7f0000002440)="039fd12aeb7dd919addb3529c221cf382a5fcd07bfe1ce", 0x0, 0x4, 0x0, 0x0, r2}, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x5, r11, &(0x7f0000002500)="9bf1d6417967977f352e3a33bef349", 0x0, 0x2, 0x0, 0x2, r6}, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x8, 0xfffa, r12, &(0x7f0000002580)="ffa105863f37594d4231baa5161b896c9668c5309c90f9885470ce929253d0c80e92b6ac36c2670dfe6fbc70754a0a3a382d3d4ea6facb2b50fae689de23bab922903d", 0x0, 0x400, 0x0, 0x2, r15}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0xffffffffffffffff, &(0x7f0000002680)="2fe03cbdeac422792922e2164dc16e7f701fa38348caa0a71c4964d892d0", 0x0, 0x2, 0x0, 0x2}, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x8, 0x2f, r16, &(0x7f0000002700)="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", 0x0, 0xe39, 0x0, 0x0, r14}, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x2, 0x7fff, 0xffffffffffffffff, &(0x7f0000003740)="c023576ab5dc9d4130ae899ce361ab4749438e5a6a10d72fa899c8da174ef168b1d01e08886ab2ecec8ff0aee70645a61ea35329a6ae9ab29397ac6cec383873f725f8b839160c1e99da1144bd860a517d6bebdc0bdf57b676ae32936c73f098b2288c1768ad0a2f10d6ee6e6c8c039ede", 0x0, 0x1, 0x0, 0x0, r18}]) 09:25:55 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:55 executing program 4: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)) 09:25:55 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:55 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:55 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x30600, 0x0) setsockopt$inet6_dccp_buf(r2, 0x21, 0xc, &(0x7f0000000100)="72adb027576dae9a6a84e467e8afdaaac8f67d221df0daeebf21e7dfbc0062613b6ccf2fc6145a4a0b8e5b4b67d737e28ee771a863b5226f76d4570bfd14844b1fadd39ed4e856ab554568ec4aefb740f965f2cba58d170acf07b3847ba8d868acc1edfbc340c5a45265c7031774d1c912d1fbc9bf7f11475a304c64b2032c78f49d2cd1a143428e4104077389b84362cc", 0x91) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:25:55 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfff, 0x80) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:25:56 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10, 0x3}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:56 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)) r1 = dup3(0xffffffffffffffff, r0, 0x40000) accept$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e) 09:25:56 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r0, 0x1b470f6b29a84104, &(0x7f0000000000)) 09:25:56 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x200, 0x40781) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x8000, 0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4ce, r0, 0x0, 0xfffffffffffffcea, 0x40000400000000}]) 09:25:56 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:56 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000000)=0x9000, &(0x7f0000000080)=0x2) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:25:56 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xe02, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080), 0x4) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xffffff81}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r3) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f00000003c0)={0xa0, 0x0, 0x4, {{0x1, 0x0, 0x6, 0xfff, 0x6, 0xfffffffb, {0x3, 0xb45, 0x3, 0xfff, 0x9, 0x2, 0x6, 0x81, 0x80000001, 0xfff, 0x2, r5, r6, 0x2b, 0x6}}}}, 0xa0) 09:25:56 executing program 2: prctl$PR_SET_KEEPCAPS(0x8, 0x1) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000080)={0x5, {{0xa, 0x4e23, 0x2, @mcast2, 0x9}}}, 0x88) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='pids.current\x00', 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8200) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x6, &(0x7f0000000840)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0xd40, r1, &(0x7f0000000140)="a94f1a08b45dfcaeb7e84d822045422be4ff6183898d14d38ed7c5eabfd7c56d79e9c1b0fc8214d8fa1d3a064bd82f679a5978a56faf37fddc4979f3f6e35ed0e343e744190b411efe6d6fd2b697035fec1547809f38676ec854628509e35aee64b4797f662c2e07086b23b92ba0df15d6f1ddafb06f01769addeaa955f2bc2b3f574a4a302528aa6356ffbc1b60469b48ff4984cc38e2806c7d8e60b49bfebf75b27d9afb4c7e5fe18659be1822fd76f92fdddf1b45b692c3574a318959f6c86f4486331502552027155c649756c9f04028051b306b95943bcb5134e432", 0xde, 0x0, 0x0, 0x0, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1f, r1, &(0x7f0000000340)="83cc00038dc4a37d53ebaa080983e308a50e3d7e87bf73c36602bc7ceba4ba383977d407a5e7c28e3d023507cbdb53ca36ed8de216a837f244c276ac67825b62fcab9054f76f66f2384c5e7f0d0ffe4bfc368cdfad900d51232dadfde6d69ede4b58141295623d2273de17a493462db13bc09823c20237f8e049e26d6820f414855bfec4e72b8797097f6589a61cf62287ada4e65246c5f98e3cdc9d64118f3e9acfcdbbd056bb7de6332fd8b836b50d6f6d5adbff26aceb3d3d171d15086c017067d2356c2298df5067758f57c64254eb0631e2a956fbb37005b5", 0xdb, 0x6, 0x0, 0x4, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xc, 0x0, r4, &(0x7f0000000440)="f22cea371285c3b0ecfd33bd45e0b7ff24f756eebb34459059a9d662cb5d7629eeaac12772c329f80b784ba6ad0e8eb67a95b3d598ba01418cf2f4f8688c4101411de160fe8ff915d4f26f05eb0f13de78db270077ee832d5152178987f8758004f0609e96935f7f5e6cb626bafc47fd78eb83466199ada0bd33704cdb31611468f8c1da28ccd74eb1a3c840a8e6e8070bebe85363b305828e804f0049582cfaea6bbd4091cc4b7441afea60eac780f35c74176b7c24cc459237babb4cde24e393159cde5f0a4ab412b44961705cfbe05689fab88f1c3fbcb01b9b59337dcca7e99abd8c970dd14eacfaced9fe5d048b645625f6a8a573c9d5e698af", 0xfc, 0x3, 0x0, 0x2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x4, r5, &(0x7f0000000580)="06922f04aae7cdb16acad24f53712ef416ec7098385b2a5a948df8dfc794277f6f440810cc44036cd3201d87e0490e2cffc8b502acda9b8733ca8f06347971e389eba406b7e8674ebb8c502d", 0x4c, 0x5, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x6, r8, &(0x7f0000000680)="cf83b526b73936d747d794eebef694e17b3acae52d29da9e6b738a737d617e2d68c4ffde26162d4fb5dc684bdf", 0x2d, 0xffffffffffffff67, 0x0, 0xbaf67b30eeff3157}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0xe, 0x1, r3, &(0x7f0000000700)="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", 0xfe, 0x4b3a598a, 0x0, 0x2, r7}]) 09:25:56 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x3000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:56 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r6, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x12) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r7, 0x0) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:56 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x0) r3 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r3) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000100)=r3) io_submit(r1, 0x2, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 09:25:56 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffffffff, 0x200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xb) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r5}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x20}, 0x8) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:25:56 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x4000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:56 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) ioctl$int_out(r2, 0xb2af40101d7b30c9, &(0x7f0000000100)) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x2, &(0x7f0000002600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) r4 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r5, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)={0x7, 0x0, [{0x40000091, 0x0, 0x2}, {0x987, 0x0, 0x7}, {0x390, 0x0, 0x3f}, {0x897, 0x0, 0xffff}, {0xa67, 0x0, 0x8800}, {0xa73, 0x0, 0x5}, {0xbe8, 0x0, 0x7}]}) 09:25:56 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 09:25:56 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="a4"], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="707261ee738a446424724a646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:56 executing program 4: openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x12) io_submit(r0, 0x200000000000004a, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f0000000080)="638dec92d76d3167f8890587fb13ef655c033042d6547c62365c06e61b48bdcc3488f415e7f6a59dc30577617870e0f8bc8df81a", 0x261, 0xff}]) 09:25:56 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r6, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x12) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r7, 0x0) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:57 executing program 0: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x800002, 0x100010, r0, 0x31389000) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000000)=0x1, 0x4) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xffffff81}]) 09:25:57 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100, 0x0) write$sndseq(r1, &(0x7f0000000080), 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000001540)={0x5, &(0x7f0000000340)=""/4096, &(0x7f0000000180)=[{0xffffffff, 0x70, 0xe6, &(0x7f0000000100)=""/112}, {0x6, 0x27, 0x80, &(0x7f0000000080)=""/39}, {0xfffffff7, 0xbc, 0x4, &(0x7f0000000240)=""/188}, {0x5b, 0xf1, 0x2, &(0x7f0000001340)=""/241}, {0x7, 0xea, 0x3, &(0x7f0000001440)=""/234}]}) sched_yield() r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:25:57 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x5000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:57 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r6, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x12) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r7, 0x0) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:57 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:57 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x555b41762ad7b300) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000100)={0x3, 0x8, 0x400}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r4) flistxattr(r4, &(0x7f0000000340)=""/200, 0xc8) r6 = gettid() r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) r8 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, &(0x7f0000000280)=0x5, 0x4) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000180)) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000240)=r6) r9 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x5, 0x210041) ioctl$PERF_EVENT_IOC_REFRESH(r9, 0x2402, 0x3228) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000140)=r6) 09:25:57 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x6000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 483.023972][T31341] blk_update_request: I/O error, dev loop0, sector 520 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 09:25:58 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x7000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:58 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000400)=ANY=[@ANYBLOB="db3ed08e556927e4142028044db5bd"], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="15fb"]) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:58 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 483.583685][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 483.583693][ T26] audit: type=1804 audit(1574501158.366:689): pid=31377 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/736/bus" dev="sda1" ino=16517 res=1 09:25:58 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x8000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:58 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 483.825483][T31377] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 483.859471][ T26] audit: type=1804 audit(1574501158.636:690): pid=31390 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/736/bus" dev="sda1" ino=16517 res=1 [ 483.935433][ T26] audit: type=1804 audit(1574501158.646:691): pid=31391 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/736/bus" dev="sda1" ino=16517 res=1 [ 484.074737][ T26] audit: type=1804 audit(1574501158.856:692): pid=31397 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/748/bus" dev="sda1" ino=16517 res=1 [ 484.112226][T31396] blk_update_request: I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 09:25:59 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x9000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:59 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000001340)={0x5, 0xb332799cb817fb02, "542bccaf270ecde342167f4d2c16e8927a3ab3f0c2892ee7d541b9cd1a41c53e", 0x200, 0x100, 0x8, 0x401, 0x40}) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x0, 0x1000, 0x92, &(0x7f0000000100)="9c1cce66e31b7f645c26100e60426b054c548bfc5cf8a5f3536bddd9f694888665095ebacf5021f188df79053bdae846336fc798d5ec0245d86cde9b8bdff767cbf1dc1f839670eb3cea596c5cb6699b7d0a102fd2887b8fe5e41d6481888d4f353ad35210df6f218845fec9caf61d2773a70418442980f13f20f963f05dda71aa173039afe17a6cb8e3ddbdcec63439a09c", 0x1000, 0x0, &(0x7f0000000340)="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"}) io_setup(0x1, &(0x7f0000000040)=0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x145900, 0x0) io_submit(r4, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r6, 0x4c01) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) r8 = dup2(r6, r0) ioctl$TIOCGWINSZ(r8, 0x5413, &(0x7f0000000080)) 09:25:59 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:59 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="61c829dbdbce63e5318bfc27e3cb1f7357d4e45eb6be9a6e217527238bb33466283f8361a866823c572be6b7afa025fb1ae89a430c2af306ca8c6398b8f14e989f47699da6e69f25b88f1a9dc36de6ef8ba85117ddbf2d3de3f9ec37e52b7fe574d0c54a2c2bc5be16aaf61fb2158079a0468a75f840ebcc488ba2ee08b3b5bcb8af6740a1a78703574b8997d4f45b38bc3e862a8610f5f1706500"/164], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r11, 0x0) r12 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r14, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r16, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@euid_gt={'euid>', r14}}, {@uid_gt={'uid>', r16}}]}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:25:59 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xa000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:25:59 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 484.789954][ T26] audit: type=1804 audit(1574501159.566:693): pid=31423 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/737/bus" dev="sda1" ino=17861 res=1 [ 484.814788][T31431] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 484.826061][T31431] buffer_io_error: 58 callbacks suppressed [ 484.826069][T31431] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 484.840319][T31431] blk_update_request: I/O error, dev loop0, sector 4 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 484.851495][T31431] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 484.860009][T31431] blk_update_request: I/O error, dev loop0, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 484.871345][T31431] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 484.879840][T31431] blk_update_request: I/O error, dev loop0, sector 12 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 484.891199][T31431] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 484.899664][T31431] blk_update_request: I/O error, dev loop0, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 484.911022][T31431] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 484.919484][T31431] blk_update_request: I/O error, dev loop0, sector 20 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 484.930782][T31431] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 484.939269][T31431] blk_update_request: I/O error, dev loop0, sector 24 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 484.950547][T31431] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 484.959007][T31431] blk_update_request: I/O error, dev loop0, sector 28 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 484.970315][T31431] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 484.978771][T31431] blk_update_request: I/O error, dev loop0, sector 32 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 484.990072][T31431] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 484.998533][T31431] Buffer I/O error on dev loop0, logical block 9, lost async page write [ 485.008411][ T26] audit: type=1804 audit(1574501159.616:694): pid=31427 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/737/bus" dev="sda1" ino=17861 res=1 [ 485.036988][ T26] audit: type=1804 audit(1574501159.616:695): pid=31427 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/737/bus" dev="sda1" ino=17861 res=1 [ 485.077633][ T26] audit: type=1804 audit(1574501159.656:696): pid=31423 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/737/bus" dev="sda1" ino=17861 res=1 [ 485.117902][ T26] audit: type=1804 audit(1574501159.666:697): pid=31423 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/737/bus" dev="sda1" ino=17861 res=1 [ 485.170971][ T26] audit: type=1804 audit(1574501159.736:698): pid=31437 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/750/bus" dev="sda1" ino=17865 res=1 09:26:00 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x0, 0x4}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0xd) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="743dfc7f6bc407fcfae45568be700e642c7266646e6f3d", @ANYRESHEX, @ANYBLOB="ffffff7f7f6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:00 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:00 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400000, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000180)=""/43) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f00000000c0)='./file0\x00'}, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x0, &(0x7f0000002600)) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x40) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null]}) 09:26:00 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xb000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:00 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1364dd2b9e67f31ad30ba1032bd3505f0fad188dda08a5281265ea2f1130749fae167d9305467fd06d0df8bd41ecd0712cc857019e8c000000000000", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="9ff6df9eaf7d3e58701b24cfb841e61108f4c0abfeee7567a5c84074794a9950becf4b848e2619f8d5a14a6a01a889896ae6808b35499cee274c8aef3741936a23d0a496032ebef4a0d121190286a57c5bf3d540ce35f83a8efc60f74e2d9e726bd6c11a9383fc556f96a8338025cab3edfcd92599789dfbdaacd365"]) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 485.610074][T31461] FS-Cache: Duplicate cookie detected [ 485.615632][T31461] FS-Cache: O-cookie c=00000000cbac1961 [p=00000000bdd30b3a fl=222 nc=0 na=1] [ 485.624522][T31461] FS-Cache: O-cookie d=00000000a4a40638 n=00000000f63a62ce [ 485.631783][T31461] FS-Cache: O-key=[10] '34323934393835363838' [ 485.637879][T31461] FS-Cache: N-cookie c=00000000d4bc7429 [p=00000000bdd30b3a fl=2 nc=0 na=1] [ 485.646643][T31461] FS-Cache: N-cookie d=00000000a4a40638 n=0000000011396e65 [ 485.653905][T31461] FS-Cache: N-key=[10] '34323934393835363838' 09:26:00 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:00 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xc000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:00 executing program 4: lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x83e851f7ee1da5b6) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4000, 0x0) accept4$packet(r0, &(0x7f0000000080), &(0x7f0000000100)=0x14, 0x800) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2000000000000263, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x91f}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffff81}]) r2 = semget$private(0x0, 0x8, 0x0) semctl$GETPID(r2, 0x0, 0xb, &(0x7f0000000280)=""/109) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cachefiles\x00', 0x10000, 0x0) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000400)={'syzkaller0\x00', 0x3ff, 0x800000}) 09:26:00 executing program 4: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0xdb8, &(0x7f0000000080)=0x4) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) dup(r1) io_setup(0x1, &(0x7f0000000040)) 09:26:00 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xd000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:00 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:01 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0xcf, 0xfa00, {&(0x7f00000005c0), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:01 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(0xffffffffffffffff, 0x81ff) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) io_submit(r1, 0x26f, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="9bf53266a90e6f622e6f96c63b8808bc0cf725093ad05fa6958292f8015bf0f8d52677b9da6989d1cd1b9541495212b6ae72550dffaa26c5310ef134240df9d81f715fee2935fc8966609e89fcc98bc0ae639afd7f1df5665d647ff04bd1c53491ef309b3dfa7ca149fc4d7fd6f6c0fd4a8dec442efef370b00c8e5e7ea54c4ae8be7b7841c762a154fa367d39d7b8f1db9f0cdefa7bc7cbdd76e55a", 0x0, 0x401, 0x0, 0x0, r3}]) write$binfmt_aout(r0, &(0x7f0000000340)={{0xcc, 0x8, 0x5, 0x3c7, 0x2f8, 0xffff, 0x39e, 0x1}, "41858ae630caa6d43057babb477b94aac97d0950bd5ef9d10f99c0396c0100c416dca4668c765778bf8b045557bf53bace0aa5249604dad4f6f3de49f355ad3b3949dbbf59052a230d2421f70e7c7882b93e3e0ffd329af4cb1cc5051c1d1d4eb12997494f94fa2d9e7d68906089e7a7539acac4c44ebdd3741b5517982074d7dea7a60bdfb3448e735da79ecac893aa97d8f6b2fd6ff1f2b821529676d02184554dc0ac97289d98f2761ccb152fba43a4703c22c4ddc03e2e", [[]]}, 0x1d9) 09:26:01 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xe000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:01 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:01 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000400)) r1 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r1) r2 = getpid() perf_event_open(0x0, r2, 0xe, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r3, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r8 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r8, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r7, r7, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r7, 0x4c01) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) r9 = fcntl$dupfd(r0, 0x0, r8) r10 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r10, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r10, 0x40045568, 0x12) r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r11, 0x0) setsockopt$inet6_udp_encap(r11, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000180)={0x0, 0xffffffffffffff70, 0xfa00, {0x2003, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x3}}, 0xffffffffffffff7c) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000005c0), r12}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:01 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xd4d62e7d7b90c07c, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:01 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xaec80256fd1b107a) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x400}, &(0x7f00000001c0)=0x8) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000008480)='/dev/dlm-monitor\x00', 0x80800, 0x0) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000008500)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r4, &(0x7f00000085c0)={&(0x7f00000084c0)={0x10, 0x0, 0x0, 0x4bb53ad66d4d2140}, 0xc, &(0x7f0000008580)={&(0x7f0000008540)={0x14, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc050}, 0x8010) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={r3, 0xac}, &(0x7f0000000180)=0x8) 09:26:01 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000400)=ANY=[@ANYBLOB="569afc4e6229824d839bba2af720ae9382bffe959ebf01bd3cc6b6cf51edc6bc02d15cdf3a8ad2306ee90564fccfc6109b6bcf76286ed118d134f809dd4cc3b60b9fb56bcebaf6b8064b3dd4fb57922cb3"], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:01 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x10000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:01 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x81, 0xc0000) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) 09:26:01 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x18, 0x4}, &(0x7f0000000080)=0x0) timer_getoverrun(r1) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:02 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], 0x1}) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:02 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:02 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x80000001}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 09:26:02 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x11000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:02 executing program 4: io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r0, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffff81}]) 09:26:02 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:02 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) write$FUSE_OPEN(r2, &(0x7f0000000000)={0x20, 0xfffffffffffffffe, 0x4}, 0x20) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:02 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:02 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x12000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:03 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x14000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:03 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:03 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x800}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000400)='\x00', 0x1) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="00a2853e443880b2f118731c356be6c4e72ae8d35daea29ef3d7b9b68ace862eac833da7a584b53570e55353d8a18fac73fb1561009836a74f2fd165a82135f972cd967702b597019d39b71c62c8d746651acb85becfeadacb4e5a9c66d32714b22c2f64f0b6a1a764e86501a74a400085ae17c12c97ac6bd2fa22de395aba9e90ffd8"], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f00000005c0), r10, 0x6}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:03 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xfff, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000000)={0x29e9, 0xf1a}) io_setup(0x1, &(0x7f0000000040)=0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="4d6bdb3632e9260256f9358db72719831aeccee586dee6dd62452804f1f8c990ea038213e93a5c9b9b12c6ece5bd46cdc5ddc2efc7af34c3e42c1ea64e44ea91a5e48ef12cd281010f099d3a98"], 0x1) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x12) move_mount(r1, &(0x7f0000000100)='./bus\x00', r3, &(0x7f0000000140)='./bus\x00', 0x10) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:03 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x17000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 488.824935][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 488.824943][ T26] audit: type=1804 audit(1574501163.596:719): pid=31624 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/744/bus" dev="sda1" ino=17869 res=1 09:26:03 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:03 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x1000f4) r8 = syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0x9, 0x0) sendfile(r8, r7, 0x0, 0x24000003) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r9 = fcntl$dupfd(r0, 0x0, r6) r10 = open(&(0x7f0000000040)='./bus\x00', 0x40017e, 0x80) ioctl$UI_SET_MSCBIT(r10, 0x40045568, 0x12) r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r11, 0x0) setsockopt$inet6_udp_encap(r11, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r12}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2100d3f4ab1197f1070c0e3b31e634759f54a8c8b4657fe55be2869cb6026908aeb23a0e603c7a462211bf9803abcd81f9714c3442b4c838aabe2d0932e08ffcec28303c915397f581ac86965175f10308d676591ace80"]) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:03 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1f000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:03 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000000)={'syz_tun\x00', 0x800}) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) open(&(0x7f0000000180)='./bus\x00', 0x480, 0x100) r4 = syz_open_dev$mice(&(0x7f0000000600)='/dev/input/mice\x00', 0x0, 0x8000) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000006c0)={0x1, 0xb}, 0xfffffffffffffe57) 09:26:03 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, r2, 0x0, 0x1, &(0x7f00000003c0)='\x00', r3}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r3}, 0xc) [ 489.252730][ T26] audit: type=1804 audit(1574501164.026:720): pid=31650 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir666694979/syzkaller.TA3Bwk/1079/bus" dev="sda1" ino=16536 res=1 09:26:04 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, &(0x7f0000002600)) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x7, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000100)) r2 = getpgid(0xffffffffffffffff) migrate_pages(r2, 0x0, &(0x7f0000000000)=0xe24c, &(0x7f0000000080)=0xfffffffffffffffd) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0xb, 0x8000) [ 489.320021][ T26] audit: type=1804 audit(1574501164.096:721): pid=31641 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/745/bus" dev="sda1" ino=16538 res=1 09:26:04 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) r6 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 489.456980][ T26] audit: type=1804 audit(1574501164.236:722): pid=31661 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir666694979/syzkaller.TA3Bwk/1079/bus" dev="sda1" ino=16536 res=1 09:26:04 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/de\x14/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000100)=""/33, 0x4000}) dup2(r3, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r4) r6 = dup2(r2, r5) openat$cgroup_int(r6, &(0x7f0000000000)='cpuacct.usage\x00', 0x2, 0x0) 09:26:04 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x20000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 489.604076][ T26] audit: type=1804 audit(1574501164.386:723): pid=31659 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/759/bus" dev="sda1" ino=16486 res=1 09:26:04 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x40b00, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000180)=0x1ff) fanotify_init(0x13, 0x101000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000100)={0x100, "080966849b6b3ad7cf5c8e5533b76e088cce58806c71527d6d33baa3b5d7719a", 0x1, 0x0, 0x4, 0xffffff, 0x1000000, 0x4}) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) [ 489.692981][ T26] audit: type=1804 audit(1574501164.456:724): pid=31672 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/745/bus" dev="sda1" ino=16538 res=1 09:26:04 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x108000, 0x0) r3 = creat(&(0x7f0000000000)='\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) r4 = dup3(r3, r0, 0x40000) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000100)=""/127) 09:26:04 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) r6 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 489.792383][T31641] syz-executor.5 (31641) used greatest stack depth: 23736 bytes left 09:26:04 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000000)) 09:26:04 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f0000000400)={0x0, 0xffffff55, 0x0, 0x15, 0x4, 0x0, 0x0, 0x41c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x8000000000, 0x1000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x1834c0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:04 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x372}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x0, r0, 0x0, 0xffffff81}]) 09:26:04 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x20100000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:04 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) r6 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:04 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = eventfd2(0xfffffffa, 0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x1f}]) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x194, 0x1, 0x3f, 0x400, 0x1}, 0xc) 09:26:05 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000003280)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f2346ae792945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00fff9ffffff0010", 0xfff7}], 0x1) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002c80)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000002d80)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x5c, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffc}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x5c}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40) [ 490.288208][ T26] audit: type=1804 audit(1574501165.066:725): pid=31714 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/761/bus" dev="sda1" ino=16522 res=1 09:26:05 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:05 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0xcc02, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000140)={0x100000000, 0x1ff, 0x21}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x9, 0x80000000}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0xffffff81}]) r4 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000080)=0x1000, 0x4) 09:26:05 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x25000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 490.639497][T31741] FS-Cache: Duplicate cookie detected [ 490.645100][T31741] FS-Cache: O-cookie c=0000000059fb381d [p=00000000bdd30b3a fl=222 nc=0 na=1] [ 490.654113][T31741] FS-Cache: O-cookie d=00000000a4a40638 n=000000005a1aae9e [ 490.661315][T31741] FS-Cache: O-key=[10] '34323934393836313931' [ 490.667482][T31741] FS-Cache: N-cookie c=00000000acb4c9b4 [p=00000000bdd30b3a fl=2 nc=0 na=1] [ 490.676229][T31741] FS-Cache: N-cookie d=00000000a4a40638 n=0000000098fb2726 [ 490.683494][T31741] FS-Cache: N-key=[10] '34323934393836313931' 09:26:05 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x28000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:05 executing program 0: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)="d8faa48c5754038ce8ba0ffe26977ef999911a65452cd418f29b5f64d0bf11b5e918aa7830c3e51387c3bc9c398537b9e74fc49a8ba56a3b7bc10aa64d1ff0695b3528bd2293358f4da7334749066a2cac4751170c7de2daf9d7fe0f24fc13d2556672213529da9d8de325e9d1eb32205a7444dfe836d1686ff6dff4465a3404f2035148a6314515c3ab7e87af17a33b3c38df06afb87ca51a5cd0310718605c31a9bc87a712db4033402d13ab8180be980040cd074c489bd8cc7d070b9e2bb92a15f4f4cd5a2fe5", 0xc8, 0xfffffffffffffff8) keyctl$update(0x2, r0, &(0x7f0000000240)="00f28529e6829e4d0123e41e963388e8fd803e6c34582f9d20a54784007d2f746aac12aba083805e647b661fdd80d15285845305d86b1c5bef3917d782685b9aeb1dca970596d3df8c07b8b387f0ca9cde3ef2056ab0b4b09e6c951e3d635e6a2c87e0b6f40534bdfb73b8d0b8", 0x6d) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xffffff81}]) 09:26:05 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:05 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"/315], 0x1) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x12) r4 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x4000) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) ftruncate(r6, 0x8200) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) lsetxattr$security_smack_transmute(&(0x7f0000001980)='./bus\x00', &(0x7f00000019c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000001a00)='TRUE', 0x4, 0x2) r7 = syz_open_dev$dmmidi(&(0x7f0000001580)='/dev/dmmidi#\x00', 0xedd7, 0x101000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r9, r8) r10 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r11 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r11, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r10, 0x4c00, r11) sendfile(r10, r10, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r10, 0x4c01) ioctl$LOOP_SET_FD(r10, 0x4c00, r11) r12 = syz_open_dev$adsp(&(0x7f0000001800)='/dev/adsp#\x00', 0x5, 0x400) io_submit(r1, 0xa, &(0x7f0000001900)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000100)="41dbfed09d9eec6ee5d37857103fa98253b76b1ff653228701ffeb33f09999d2ce173b6b35be2224dad71992ccd4194e5d64ebc906c62d97eba0c7b950195b9b7ff43c988f0251500ec2b8e9ba772c256cec9ed8658b5d681e7569d6f647959eb1", 0x61, 0xcf, 0x0, 0x1, r3}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x64fc, r0, &(0x7f0000000340)="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", 0x1000, 0x7f, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x20, 0xffffffffffffffff, &(0x7f0000000180)="4401f2dfd5a9ba6eab222de78ebdc7ebeca32992d43904fb8abd4ba703ab77752b68b81c7bc3597bd9edc4ea04a2c1cbcc1a84f0abe31c5f56319b1ba5f09c", 0x3f, 0x5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8ad4fbebbb30edbd, 0x0, r4, &(0x7f0000000280)="f1", 0x1, 0x8, 0x0, 0x3}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0xe, 0x27b6, r5, &(0x7f0000001340)="3c27dc324581f5b9404ee5821676d7c5dc3f73a8c56d760716ed18", 0x1b, 0xffffffffffffff7f, 0x0, 0x1}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f00000013c0)="c9a561498651620632216ee73f5049da2bc6bc70deda1283a15613ce7b1721eadc5dbabbbdf969c83bfc7c304ecd6dec0416e796209089e2ce995a397a55894b8c0b00007a2bd9f6ee491dc479415b0ddd0b52c6ad9574e7bb147e5bfca92d915f78f862c8ea86bf5769c0216d90e7ed4d87048d719b3241", 0x78, 0x7fff, 0x0, 0x1, r6}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x5, 0xfff, r0, &(0x7f0000001480)="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", 0xfd, 0x8000, 0x0, 0x0, r7}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x3, 0x4, r9, &(0x7f0000001600)="5027a9f1d961daadc00842c4bc25b17e991390198bbdfdca0de6f2380e64f95dfdd3f983fdc693d5d3126584937ed32c903a366528fc9925727879084ce759dfe20ca21723f795eae9bddd927b3d65484b8ee7d0c7d2e75e6e211d1a40becd1d54bfd999f822f946373fde23aed8fd16c5589b5ec42e54a1d88bfd36a1c91352e1bb52eb9de4ff72f7e728e411717b876489fd5ed73a84da29e72764cf143e9d39b7a24ac2620baa8ef836fb07184bbd14622b1f9e4e6b305304400ee676abfea995fa3165b584f50590ed2d80ff1ff0598220abcea35b5f77bca42b7d60d7721c3a2b9c07fc3cd754f73fb7213cdd0d20", 0xf1, 0x2b, 0x0, 0x3}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x6, 0x7, r11, &(0x7f0000001740)="00ff23c37aa2bfa020a3b241f437a9ff2286d59296f9b2fa992daa0e9697a733b6416f9a8cfc7c60039e0fe7aec75678456267119bd0ccc15641e34d8945e6783a8e8a85b3184ac27f02645f6fb04c4a7befb4836e50f9d362a38b2dd52634decdb0be85c90efa4e69304dc0fc0aab7720c09b31e7118262b206187408b253d62da045614b475923392371592e86c3132f8fd7f38cd2c2f77a99c059bb26d651d6514f73e5b3da5f3eaba2b1bdd81cbdb1b03a1be1111d9484b1f36633", 0xbd, 0x7, 0x0, 0x0, r12}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x7, 0x7fff, r0, &(0x7f0000001880)="af69de65cf8772313f3ffd590f9f79494464", 0x12, 0x1}]) 09:26:05 executing program 5: r0 = epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r6, 0x4c01) r8 = fcntl$dupfd(r1, 0x0, r7) r9 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r9, &(0x7f0000000400)=ANY=[@ANYBLOB="9c96224a015dc14612f6e1ac557920cabdcb54f92d2cb605cec240a0d49e5846a8dd344f8850719d412cd3e2735c5c64526514a942110f244ffc6614bd9754a1a4608e1840583cb776ff46c02a35f87f4391adcdefa1ca5d46f313f50180dbbc232171336e99a4b6e37151dcf606054b4d2f18de2cf8248c69083ff5751e3375be4aa54d3e87b08f86dcf329caedfa5ec00ac5a2233c4e2e5800"/168], 0x1) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x12) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r10, 0x0) r11 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000880)='/proc/self/attr/exec\x00', 0x2, 0x0) r12 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r12, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r12, 0x40045568, 0x12) accept4$bt_l2cap(r12, &(0x7f00000008c0), &(0x7f0000000900)=0xffffffffffffffaf, 0x80c00) r13 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r14 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r14, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) sendfile(r13, r13, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r13, 0x4c01) ioctl$LOOP_SET_FD(r13, 0x4c00, r14) r15 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r17, 0x0) r18 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fstat(r18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r19, 0x0) open$dir(&(0x7f0000000940)='./file0\x00', 0x126240, 0x10) r20 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r20, 0x0) r21 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r21, 0x0) r22 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r23 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r23, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r22, 0x4c00, r23) sendfile(r22, r22, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r22, 0x4c01) ioctl$LOOP_SET_FD(r22, 0x4c00, r23) r24 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r24, 0x4, 0x6100) ftruncate(r24, 0x8200) write$cgroup_type(r24, &(0x7f0000000200)='threaded\x00', 0x175d900f) r25 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r25, 0x0) r26 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r27 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r27, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r26, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r26, 0x4c01) ioctl$LOOP_SET_FD(r26, 0x4c00, r27) epoll_create1(0x0) r28 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r30, 0x0) fstat(r5, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001140)={0x0, 0x0}, &(0x7f0000001180)=0xc) r33 = getgid() r34 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r35 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r35, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r34, 0x4c00, r35) sendfile(r34, r34, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r34, 0x4c01) ioctl$LOOP_SET_FD(r34, 0x4c00, r35) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000011c0)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r38, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r41 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r41, r40) r42 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r42, 0x4, 0x6100) ftruncate(r42, 0x8200) write$cgroup_type(r42, &(0x7f0000000200)='threaded\x00', 0x175d900f) r43 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340)='/dev/snapshot\x00', 0x4000, 0x0) r44 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r44, 0x0, 0x0, 0x1000f4) r45 = dup2(r44, 0xffffffffffffffff) r46 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r46, 0x4, 0x6100) ftruncate(r46, 0x8200) write$cgroup_type(r46, &(0x7f0000000200)='threaded\x00', 0x175d900f) r47 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r47, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r49 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r49, r48) r50 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r50, 0x0, 0x0, 0x1000f4) r51 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r51, 0x0) r52 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r52, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r52, 0x40045568, 0x12) sendmmsg$unix(r8, &(0x7f0000003740)=[{&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000540)="d570ae1d79232680c7c7f6cf81b9b94775e746a44e23cd5481d8dfc59f54bc8e75062512ad1b61019d01956bfc163c89aa62a5b9d16e0540f352a7d09a6adc6ddc0185f1c0351883cc15c9aace1bde400ba93a63757814ba80fc747e11212241599faad4ce6d426b8f5a3c6999", 0x6d}, {&(0x7f00000005c0)="0a1114f08db7e74a1e5f2721d168", 0xe}, {&(0x7f0000000600)="b0eab4253177c43c5827c62d7567ee1c9566b77957094d432e63afec6c7312c17c60a78266679f12fa4c78fbb89c586c11", 0x31}, {&(0x7f0000000640)="ecd498edfc5edc1c57b6b570a3a606197360a917c8dedcfbda4a064fa44615aa02405d651255586a685b57985804ea45c60a857c7bb5d7c8c2f560079625706eca448c47f32703086db904a30c71fd8cd2da0b47a2b608d9c2428f19b8b470382d87e70ca49a4cfd256138699926a417539de7d85dedc41dda4d02bbd4e89e098c2a46e78e772fceab4543524efdc9ccee90bc9c30e0c267408cc2d31251dc9aabf18ad999ba7a7542c6f5c180b2e12eff3d47e86f", 0xb5}, {&(0x7f0000000700)="18acaeff18a43431c338b30a78f827b6062d87273657b187b001e8a8e0a63a1785e29b08fc6c3b126613231ab578f184f8ca611c494b6c", 0x37}, {&(0x7f0000000740)="a922e287a957c9a1c39b12eefee8ae3a4a136f56b1cb60cd459a7e201296b252e8568551ff817ce5cff5c8e05d7c19ba20d34dc05e1f8c8818f5f16ea45c9e1535caacee117b8cda8ec632fcbaceb617e77b83810024f8dbd38dffbab1d9760a390165acbd1f0e115a3719cabca3d91162bbd72992fb038c308a7778be35da50c4353afd94c7f58844848530ea51dc603bf01d1b10b61f", 0x97}, {&(0x7f0000001680)="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", 0x1000}], 0x7, &(0x7f0000000980), 0xe0, 0x800}, {&(0x7f0000000a80)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000b00)="681ce99220eb250f7ee12478a586eb54dab08cd8f799164f57967174d167958861bdf73c12cfb076eb57928f628aee49625dcd54b5c805c3b238c927430a49bde530310184ebcfe58a0bbd565e39e428ee0bc32b76d7c4d5dd2317e5ae49f48f6e299cdc62fc7c40516fcc0e01f504e411e069a4424646183a8d348a3d023981e26a03be8a245d6617349bc4964cd529e15c5942ae9a43bf87afe0d08f219cbe1f9e408fadff78f7c6fbf83fb4557a38d8ca3ed5570b237352a9368843bff82aefca3c8ede8670a6bfd6ac710979b1d4dcc6c5de63a9b9c53a548ccf123dd10190783a5b1245ce56e7970b", 0xeb}, {&(0x7f0000000c00)="a6500d955516b208b6de81bb0e27ac70b020bddd33c2d0b51ff126073920a1344c192c144496798607edc2310840f9e651c1a3da53b086d17ed5010cd19583bb83fea94ef1a67a16275cd2f9b5c1f891288ac94be9cadeb3b31e8cdb2a77e06075f038d854af7988b61a420524c6fade1eb8aa1d9d8365654ba721f82251bd1d4deae48111af8a67086d4aa6062cec22cc6e0625f044c694b812f5133a5730aa88ea76c922420508799a15020370ce4ed31987ecc797e561aca9281c78ac51a49d37d8de8222c7b216feed18e30146cf9acb4572c4", 0xd5}, {&(0x7f0000000d00)="02716365a36b7c94de1f853912da9ef4486bf0da022cad0190e6182a0e21378ea2fa1ce94dda3461e3f1d281e3af774150278e8395cc1ae7f8885a18d76e154540a818af6b5a0e2fa399e033d194035134b61f83b9d9fd7033907ca2c5bf910197eed464184b5a60c73d9a44d9ec51c0be16e09a69703e9849cff80157bf420dad7364fa57a7a44e445c843c61b02f7a2d618a415bd5f6794cdd0d226a74", 0x9e}, {&(0x7f0000000dc0)="34fc677eca4ce533f96836f5951c7cb4a23e926df4b952a5afa7dcbe247e3bdef3c5dc3569b7db6c2ecbd47aa50ccb586a4bbf3a7d617a686d1ba7cba72dd5ed04a6d25861a9b376c2254b173d6faa3789cd3f0226f646330b6074bbe51e43f2686eb927e4f64bb3abacaf16069306b73cff97efe16db615c18989f89cfffb5b609f8b9f9878822b7142726dbdbc7b4d2aaafdb9dcfcd0", 0x97}, {&(0x7f0000000e80)="121190afef38162287c24921941fd05298ed2f7a39b992514f37af1a075a93641dc2af1a74f7f48dccf5c352ae451057428128684bc7d24361342b892b6157b6d49feb321f16a5aeecf7e146e4e857644d180ac8f9ec2f2f73210317546e013ab8ff32664f6c5469c361fd09439278f152b8e3fba28b5a6604a777b09ea7d6d3bbe77b679a52b6ae0f27f1af3c514f", 0x8f}, {&(0x7f0000000f40)="383ba597b0ec7b9e2efbe066367ab59e5858bfeae44675361bded66aa0456f57442fe3ef3009ca995240c86b21dfc3ce7da3ba515882f091c0444330188c7223454d26b13d0e75e61407c3b9bad09cf3dc9b4b18ac5039ef208bf6a18c8bacccfea479967062a3fb6de74b9cb25d0a0a521f6824764623aa0b819907f8e21235d842", 0x82}, {&(0x7f0000001000)="2f06880919bc60654216e5adcd7caa1cf8f5bbb443f826e0cd76f761a463dfe8cf8ff8a3c4e3", 0x26}], 0x7, &(0x7f0000001380)=[@cred={{0x1c, 0x1, 0x2, {r28, r30, r31}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r32, r33}}}, @rights={{0x14, 0x1, 0x1, [r35]}}, @cred={{0x1c, 0x1, 0x2, {r36, r38, r39}}}, @rights={{0x34, 0x1, 0x1, [r40, r42, r43, r45, r8, r46, r47, r49, r50]}}, @rights={{0x1c, 0x1, 0x1, [r51, r0, r52]}}], 0xd0, 0x7dd5837e77a57b40}, {&(0x7f0000001480)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001500)="920899d5564a49e2a94d5217704b266853b4e97d086823a0e3abd9aba207993ec0d44cb1557bf157b977f0fc91431975dcc1a2c90cb48ad13cbf9fb634d0b1b36230a112bec84de5dabb", 0x4a}, {&(0x7f0000001580)="065e8db811afca887491c0684a2a5e402ca9bda3e50116d1004ad6", 0x1b}, {&(0x7f0000002680)="5de7be0fe87c14677174aeb1dbbb3ab165b8d79251776f1bf941bcdfd14fa5ca8777c6ae7c8526cfea21be9d855923ef245f0ef995b503dd85e39ef0c65b5829c1f13a33fb04aed680daef05c97b5c07e6f5873d153c9bea8e2f9a119ccfeb3943db60949a0f5f8b9d1ae0730730bc78d58138ddf8b680b3322ad591fb93d2decbdb4bcc83abf046ed32c65108d92daa5b9bd5003de894c090513c20c3ea4d1c55797f14d13742598c728fb7c669b1bef8792715932d4689d4", 0xb9}, {&(0x7f0000002740)="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", 0x1000}], 0x4, 0x0, 0x288, 0x40}], 0x3, 0x24004002) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r53}}, 0x18) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x361, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9067f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35110832bb0cbf909651c8c600f8de031f3161edefb1ba0706eb9644ce21b8e89e7d3b9df6001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 09:26:05 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x600) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080)=0x200, 0x4) [ 490.973985][ T26] audit: type=1804 audit(1574501165.756:726): pid=31754 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/763/bus" dev="sda1" ino=17887 res=1 09:26:05 executing program 0: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x88c00) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180), 0x4) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000140)=0x2c2f653a593116e0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x709d, 0x4000) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r4, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) socket$caif_seqpacket(0x25, 0x5, 0x1) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000080)={0xfffffff8, 0x6, 0x1ff, 0x40}, 0x10) [ 491.105289][ T26] audit: type=1804 audit(1574501165.886:727): pid=31757 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/747/bus" dev="sda1" ino=16523 res=1 09:26:05 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 491.231564][ T26] audit: type=1804 audit(1574501165.966:728): pid=31753 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/747/bus" dev="sda1" ino=16523 res=1 09:26:06 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x29000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:06 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4001, r5}]]}}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r9}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4001, r9}]]}}}]}, 0x38}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r13}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xffffff2b, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_TYPE={0x0, 0xf, 0x2}]]}}}]}, 0x38}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20521049}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=@dellink={0x20, 0x11, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40, 0x1100}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xf04ec6785fc9b09f) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r14, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) r15 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) sendmsg$TIPC_NL_MON_SET(r15, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xffffffffffffffec, 0x0, 0x2, 0x70bd28, 0x25dfdbfe}, 0xffffffffffffff6e}, 0x1, 0x0, 0x0, 0x4000481}, 0x41001) 09:26:06 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) syz_open_pts(r1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = fcntl$dupfd(r0, 0x0, r3) r5 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r5, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x12) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r6, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:06 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000400)='/dev/cec#\x00', 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r6, 0x4c01) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) r8 = fcntl$dupfd(r1, 0x0, r7) r9 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="ea"], 0x1) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x12) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r10, 0x0) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r11}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:06 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000180)={0x3, 0xff, 0x7f}) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000080)={{0x0, 0x0, @descriptor="e0713dbfe5da4241"}}) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000100)=0x1) r4 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) [ 491.639405][T31782] __nla_validate_parse: 7 callbacks suppressed [ 491.639411][T31782] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 09:26:06 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2a000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:06 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) syz_open_pts(r1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = fcntl$dupfd(r0, 0x0, r3) r5 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r5, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x12) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r6, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:06 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x1000020, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB="2c66736d616769633d3078303030303030303030303030303030302c646566636f6e746578743d73746166665f7558065651807394bdbf94c716e579caf8f1c4f164c6a1f835e4f4883accbb26983607b451a81aa1893213308758eba1d461abcca04850ded9a0dbb68635ebee1759781f4b9ad987f647f02495e37c5cf7084bf34c18ded829d522ba57443bc7a5ea9b08c4adc02bfb1df4d523673064fc76e39a7f076debfbd3e72dfd2a441b2b7d5d63516ac2672ea828b569743899a29c2c61707072616973652c61756469742c00"]) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:06 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x34000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:07 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) syz_open_pts(r1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = fcntl$dupfd(r0, 0x0, r3) r5 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r5, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x12) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r6, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 492.364847][T31816] print_req_error: 610 callbacks suppressed [ 492.364858][T31816] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 09:26:07 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000400)=ANY=[@ANYBLOB="5638b4f0e8adb3d94d4459c1cfbbf41d78dc0fbf0b65bc1c1760c8feb2d4c6f1fcfe4eafdc5e466667c258cfeef2488995987d28"], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 492.561840][T31808] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 492.619041][T31832] blk_update_request: I/O error, dev loop0, sector 392 op 0x0:(READ) flags 0x80700 phys_seg 15 prio class 0 [ 492.646043][T31846] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 492.658941][T31846] buffer_io_error: 604 callbacks suppressed [ 492.658950][T31846] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 492.673318][T31846] blk_update_request: I/O error, dev loop0, sector 4 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 492.684516][T31846] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 492.692967][T31846] blk_update_request: I/O error, dev loop0, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 492.704146][T31846] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 492.712571][T31846] blk_update_request: I/O error, dev loop0, sector 12 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 492.715658][T31832] blk_update_request: I/O error, dev loop0, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 492.723872][T31846] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 492.723945][T31846] blk_update_request: I/O error, dev loop0, sector 20 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 492.723955][T31846] Buffer I/O error on dev loop0, logical block 5, lost async page write 09:26:07 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x3f000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 492.723985][T31846] blk_update_request: I/O error, dev loop0, sector 24 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 492.723993][T31846] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 492.724022][T31846] blk_update_request: I/O error, dev loop0, sector 28 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 492.724031][T31846] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 492.724064][T31846] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 492.724092][T31846] Buffer I/O error on dev loop0, logical block 9, lost async page write [ 492.724124][T31846] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 492.902704][T31812] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 09:26:07 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x40000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:08 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:08 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x8, 0x800000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000002c0)={0x1, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000480)={r3, 0x14b}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r1) r5 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r6, 0x1, &(0x7f00000006c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}]) r7 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x12000, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r8, 0x1, &(0x7f00000006c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}]) io_submit(r8, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x5}]) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={0x0, 0xed, 0x29}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'xcbc-aes-neon\x00'}}, &(0x7f0000000340)="ddb818d8a8efce772ec4f63b01a61296fc764fb47606f156fd4bfd1bfcdc040bfef3c98f05f827170821215644a314a924e426b7ac8a60e6c25eb06076078cf2d949e33ddc30acfe819f58fde315fc866d5a28cbd7b72784f1604096aea4463c4a8d5ed3f5ac124310a4a3860ce40c8ed460abef4ae64eb9907c24d66c0a159bb7602b219e46740b6942c279acc700717354c614ef5a2eca9c609044e076e8c5cd9b055c0d0fd67006df2385ee9b25a7150f1dcd280ca6d16340746cd513e01b68bcef544653cdc0a4d3c2a3a5b658256f7e126f168c233a40f3b1e0f0c2f86d6f75ca9e77a13e137491c9b079", &(0x7f0000000100)=""/41) 09:26:08 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r1, 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r6, 0x4c01) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) r8 = fcntl$dupfd(r0, 0x0, r7) r9 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r9, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x12) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r10, 0x0) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r11}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:08 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = dup3(0xffffffffffffffff, r1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:08 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='\x00de\x04/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) r3 = syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x5, 0x40000) ioctl$RTC_PIE_OFF(r3, 0x7006) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000280)={0x2f, 0x1}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x404, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000840}, 0x40000) 09:26:08 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x400f0000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:08 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="56f7c8faa942cfc0ab1c0368f5d8da279c1f514e21ff7fffff9e0920a16f17cd0282d6c00675603e554420112f5bb9780d548ae14fbafb653892f5a0b2da689f8295d15c9a06000000000000008fd38f82810261a6cf32f1505a5ec3ab2b6a3f843dabacc31ae2a6d9b8bff4a540becb3e687542a4a9971bfde6751020f7b4000000"], 0x1) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x12) recvmsg(r2, &(0x7f00000002c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000000240)=""/92, 0x5c}, {&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/195, 0xc3}], 0x5, &(0x7f0000000080)=""/4, 0x4}, 0xc0000002) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20400020}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r4, 0x806, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x2, @media='eth\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x10040000) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:08 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0xfffffffffffff000, 0x1000f4) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x6}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 09:26:08 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = dup3(0xffffffffffffffff, r1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 493.848217][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 493.848224][ T26] audit: type=1804 audit(1574501168.626:748): pid=31893 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/751/bus" dev="sda1" ino=16557 res=1 09:26:08 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x210002, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000000002120000000000140a00000000000000010000000000000404000000000000ff0100000000000002000000000000007300000000000000ff00000000000000"]) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f00000001c0)={0x5, 0x1e, &(0x7f0000000180)="1d660ea4fa61e859595cbb5edac449c7c102e7c4a65af38673e544ec49f5"}) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 09:26:08 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x5) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) [ 494.008870][ T26] audit: type=1804 audit(1574501168.686:749): pid=31899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/751/bus" dev="sda1" ino=16557 res=1 09:26:08 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x48000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 494.173817][ T26] audit: type=1804 audit(1574501168.956:750): pid=31901 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/769/bus" dev="sda1" ino=16533 res=1 09:26:09 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r1) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, r2, 0x0, 0x1, &(0x7f00000003c0)='\x00', r3}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r1, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000500)='\x9eself\x00', r3}, 0x30) r5 = getpgrp(0x0) perf_event_open(0x0, r5, 0xc, r4, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)) r8 = syz_open_pts(r7, 0x0) r9 = dup3(r8, r6, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r11 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r11, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r10, 0x4c00, r11) sendfile(r10, r10, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r10, 0x4c01) r12 = fcntl$dupfd(r0, 0x0, r11) r13 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r13, &(0x7f0000000400)=ANY=[@ANYBLOB="5676ad57bf3853fa0f2905524922477c7f13c8bb1b9d7e8e2fef79f1eb6d19be605f6d6b15435b2208b52a7619861f192fbbb94484333ca6b14dbee27919bd8beb74e371d7deb088b0c1698a70136535dbd12ec66e7e2fb1217126bc10092748f035dee0c7a1e633ca5ea2fb2dc072e8bf7b5a41a9446508867b0c2c5c42668d211c7f37f9a95745ba64bedc85e9076a8af51ab0978fb8e4c39e7fa839571ffdbed0cb56876f669325682e9597d6fb96bf2cdbc8e6d9c00e4a89322d00d47d705fe1c1f451f6efd26655a6d594f687ddfce9cc22b0800bea81ef0320ed"], 0x1) ioctl$UI_SET_MSCBIT(r13, 0x40045568, 0x12) r14 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r14, 0x0) setsockopt$inet6_udp_encap(r14, 0x11, 0x64, &(0x7f0000000640)=0x2, 0xfffffffffffffeac) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r12, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r15}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r9, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c00f07a79ae260d90df80bad7e36a8445b996516aa4aa964d99a7de84fae1b8d0ac59a71b20fadf8f9008a3833b59e9c4e53d98b5b361e867c8bbbcd6a8ce28a62a90f4f3553607f31a29c56d8be854348e8d4411808b7c51f1e6916d4600fe333d3bdea3193a4eb775dcf1133408d2220ab40156"]) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:09 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000000)={0x9, 0x42aef537}) 09:26:09 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x5c000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:09 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = dup3(0xffffffffffffffff, r1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:09 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x3d89, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x3ff, 0x1, 0x4, 0x1ff, 0x0, 0x6, 0x4, 0x101, 0x7, 0x6, 0xc000000000000, 0x100000001, 0x9, 0x2, 0x3ff]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000240)={r4, 0x5b, "a63b1c1ecf61e451769e6dcb82ce0ab6127353acf916854a0e97d673546d399ca87e5967a9657a99c6a676b363903f20b650a15225d52201ad9a1c1ea9a8667acbcb057a911b46af8b58d4153b945a39bccaf2f9ba938daccde67e"}, &(0x7f0000000080)=0x63) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) [ 494.473161][ T26] audit: type=1804 audit(1574501169.256:751): pid=31927 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/752/bus" dev="sda1" ino=16518 res=1 09:26:09 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1106f999, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000500)=0xe8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r7}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4001, r7}]]}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', r7}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x1, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r12}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4001, r12}]]}}}]}, 0x38}}, 0x0) r13 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r13, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r17, @ANYBLOB="00000000000000001800120008000100767469000c00020008000100", @ANYRES32=r17], 0x38}}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4001, r17}]]}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000840)={'vxcan0\x00', r17}) r19 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r19, 0x0) getsockopt$inet_mreqn(r19, 0x0, 0x23, &(0x7f00000008c0)={@initdev, @multicast2, 0x0}, &(0x7f0000000900)=0xc) r21 = socket$netlink(0x10, 0x3, 0x0) r22 = socket$netlink(0x10, 0x3, 0x0) r23 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x8f) sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x2f8, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r24}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r24}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4001, r24}]]}}}]}, 0x38}}, 0x0) getpeername$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0}, &(0x7f0000000980)=0x14) accept$packet(r1, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a00)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004c00)={{{@in=@empty, @in=@dev}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000004d00)=0xe8) r27 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r27, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r27, 0x29, 0x22, &(0x7f0000001080)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@empty}}, &(0x7f0000001180)=0xe8) r29 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r29, 0x4, 0x6100) ftruncate(r29, 0x8200) write$cgroup_type(r29, &(0x7f0000000200)='threaded\x00', 0x175d900f) accept$packet(r29, &(0x7f0000003200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003240)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000005100)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f00000050c0)={&(0x7f0000004d40)={0x2e4, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r8}, {0x13c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {}, {0x8, 0x4, r12}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x51, 0x40, 0x7f}, {0x1, 0x4, 0xf7, 0xbb5a}, {0xcb37, 0x1, 0xe6, 0x40}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xe0}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x178, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r25}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r28}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xfeec, 0x4, 'activebackup\x00'}}}]}}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)=""/123) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) r30 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r30, 0x4, 0x6100) ftruncate(r30, 0x8200) write$cgroup_type(r30, &(0x7f0000000200)='threaded\x00', 0x175d900f) r31 = socket$netlink(0x10, 0x3, 0x4) writev(r31, &(0x7f0000003280)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f2346ae792945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00fff9ffffff0010", 0xfff7}], 0x1) recvfrom(r31, 0x0, 0x0, 0x0, 0x0, 0x0) r32 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002c80)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r31, &(0x7f0000002d80)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x5c, r32, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffc}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x5c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r30, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe8, r32, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x84}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x16}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x16}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xdf}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xc9dc9b3d7c713f1e}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) [ 494.651519][ T26] audit: type=1804 audit(1574501169.426:752): pid=31927 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/752/bus" dev="sda1" ino=16518 res=1 [ 494.748590][ T26] audit: type=1804 audit(1574501169.426:753): pid=31942 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/752/bus" dev="sda1" ino=16518 res=1 09:26:09 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x40081) r3 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r3, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x12) r4 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x3f, 0x18082) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8200) write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r10 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r10, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10) sendfile(r9, r9, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r9, 0x4c01) ioctl$LOOP_SET_FD(r9, 0x4c00, r10) r11 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) r12 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r12, 0x0, 0x0, 0x1000f4) r13 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r13, 0x4, 0x6100) ftruncate(r13, 0x8200) write$cgroup_type(r13, &(0x7f0000000200)='threaded\x00', 0x175d900f) io_submit(r1, 0x3da, &(0x7f0000000a40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x1, r2, &(0x7f0000000100)="5f67bc8a3fd5a66a7323c0ba25a932a3f50ef395dfcb28490495ac17a8695cdbfc8de24b0cd23fb6b3bde175c7008591b9553d0e99ad9d78df3f31988bb6042471d5c0a9a262316003b93cc69d3cb246b47862b89f2ca1264f9764a75497bb4c004155d243355dfb740224f7e5ed213aa57d9a307c686325f833a6a1ab5f80103d9950ed67a316488a788081d0f2113ff38fd26c8d56ba008f", 0x0, 0xe02, 0x0, 0x1, r3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x9, r3, &(0x7f0000000240)="9cc66a2e8002b19965e7ab3fdbc478f0e4fd7ee3651e1c71fdc45bbeec10360e7103c875715922688d5d44f3774b0ebcba6bdcbc283022719362111c0f1d736cc30f86c48f798e4ccf84068919c44da28e09f56fb8ed985f0ad17a848ca8c00f89a4f08708b969b565357d62bcc3ed07689f0d", 0x0, 0x10001, 0x0, 0x3, r4}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xff, r0, &(0x7f0000000340)="5b5593898fc4bbd0357437eb52342575633f848a7ffc682b225578edaa63974a9bb4894a9b9878479d4498e909921326d146e160a92dbafb6e2ecd2b1ed59905c0877e4932ee322668a66be965a06508ede0ccbf4e8352c715605f5e53490ccbc10289819a3a16aae6d42085ec9cc3cf9d6dc32ff97be95bd68054225a29f71f5d34d46b1a9597c396438a34b272625e803f78328a34c81c4eb374faa78cf36a93b2d5401b80a0986bd8ae31402f2396ed1463e42283e768968d905298500312040b4350bc82d3b97e31a3d50a1f1812fb6367a5ed4646dae9", 0x0, 0x80, 0x0, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x401, r5, &(0x7f0000000480)="82550736a5e88cb2ff4badfb00de445915392ba94604c7caf458bdd42208cacd0df3d34118a104755e883d320594ddfcf1ecf6df4e0047eea64b62d13a6d6f6b2b4f495116be6fcfedd4e78028c9218d362e9881f971b057bbd2918a0c810f0016af", 0x0, 0x4, 0x0, 0x2, r7}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x0, r6, &(0x7f00000005c0)="0ebbc578ab9f2af81b262f19740947b90935b0c2506a2940a0d11bcda1cc431190aa778c86bde40b341f4bfe4bf56c232847be7b9c29cdaca94b6046a7b96171edb22abb0a28a9f8790ab508e48fd0ff4833a84522ae", 0xfffffffffffffd96, 0x443c}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x1, r8, &(0x7f0000000640)="b3a69d22d81160713be742dc5272ebe86b10a6ee0a5214b45d71b78a756e08ac39208aa6e5cba2c0bb3eb81c0dd81440000edd36ac1fcaa3ad5b6905c7103d74cc5395cd99efb114a26e651a81e6942a32bc1e245579f12ca939eac9ac5010eded46354e91b363125d3b942aa667614a10446e842b7812c5d52d551c189e746e326bc6a3ab43ad9fcaf63ded3bdf1ce62ddf1e8c6ac8de9e47c7507126df48667a1f6886f451d4ead6f189ac54cec77e66977a253c5746eb8cc7703bddce94ed32c61716d4c3a96564fbd5ed8cfe9821828b71d3f63c671ccfc24e9dae", 0x0, 0x9, 0x0, 0x1, r3}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x2, 0xff, r10, &(0x7f0000000780)="c627e91c57f26ecdcc24c1fd3503f73116b74a65e9d51f92db9b11c4517fa83dd35314f5881d52020cccb9a04c66115cd362a0523d5057eb3b91c8f72659bbc5ae17aa625df05db84af54774852ba1c2e27b10796008549b67ac031295b1290738f14e6af9e0f8ccb2b2f6c3f52d481a9a9b1f446df6ffdd6ee82ebd862aa01e698de6c243e97b1b9c846768fe7c0c5273836c1358a78050b2c215d78315d529c080bf3679", 0x0, 0x7fffffff, 0x0, 0x2, r11}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x7, r9, &(0x7f0000000880)="0cb0b0e67445c46cc504d17c0a025d976d034618d8bb04c9ec54bef17855e9bd5d94c28a20da65de59786c454692fc2b57830744f5b8539fcf508b810723", 0x0, 0x3, 0x0, 0x1}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x7387, r12, &(0x7f0000000900)="33135b21f94c2993fac50676c6e299968b7c3754b9c657315dbc4c2754a552f078b733e6ef95d6e49d0af3a3080f056f51c2780ce4fb09f454b408580c97620dee6cc8ee1a9da92c6ada64435c227d9d0bc32d280578e4db49cafe7652e1409561869db00085619489b9abede4dee288fea63fa317ddb5233d3b02d2f8f52dfdc458c08f75603f0788bca0c193ddcb0d4140bb640859e0b6098b45ce05d1ff203dba9108", 0x0, 0x8, 0x0, 0x0, r13}]) 09:26:09 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r1, r6, 0x0, 0x4) ioctl$LOOP_CLR_FD(r6, 0x4c01) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) r8 = fcntl$dupfd(r0, 0x0, r7) r9 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r9, &(0x7f0000000580)=ANY=[@ANYBLOB='^'], 0x1) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x12) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r10, 0x0) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r11}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a418b9f7c801efbdb8dfb5cd492495", @ANYRESHEX, @ANYBLOB="2c7766646e0500", @ANYRESHEX, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:09 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x5dd8fa77, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 494.949912][ T26] audit: type=1804 audit(1574501169.726:754): pid=31939 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/770/bus" dev="sda1" ino=16568 res=1 [ 495.014439][ T26] audit: type=1804 audit(1574501169.756:755): pid=31969 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/753/bus" dev="sda1" ino=16673 res=1 09:26:09 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 495.105310][ T26] audit: type=1804 audit(1574501169.886:756): pid=31977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1058/bus" dev="sda1" ino=16657 res=1 [ 495.145937][ T26] audit: type=1804 audit(1574501169.886:757): pid=31977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1058/bus" dev="sda1" ino=16657 res=1 09:26:10 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0xa4101, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x1b0a4be7, 0x223, [], &(0x7f0000000100)=0x3f}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r1, 0x4, 0xffffffffffffffff, 0x1000f4) io_submit(r2, 0x1, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r3}]) 09:26:10 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r3, &(0x7f0000001640)=ANY=[@ANYBLOB="a1a87cdfe3d100c2548026e4"], 0xfffffffffffffc43) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x12) close(r3) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r4, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r9 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r9, &(0x7f0000001600)=[{&(0x7f0000000600)="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", 0x1000}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) sendfile(r8, r8, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r8, 0x4c01) ioctl$LOOP_SET_FD(r8, 0x4c00, r9) r10 = fcntl$dupfd(r0, 0x0, r9) r11 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r11, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r11, 0x40045568, 0x12) r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r12, 0x0) setsockopt$inet6_udp_encap(r12, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r10, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0xfffffffffffffd55) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r7, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r14 = accept4$rose(0xffffffffffffffff, &(0x7f0000000440)=@full={0xb, @remote, @default, 0x0, [@bcast, @bcast, @bcast, @remote, @netrom, @netrom]}, &(0x7f0000000480)=0x40, 0x80000) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r14, @ANYBLOB="38b46a9fad92d2874e7f32ed5f5bbfb12eaa5d0df0a1dd6d5830cf6833e05f2fb940f26802cb807fa7017fe2fdc035949d8da429aaa57e057fff1d3df322b996f79076fb269f205907d80d9b0481ff65de5eb4c4c510d7d6811f1fdbba797ef14b18352ae22c4883dab235417dfdaa"]) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:10 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x60000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:10 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x6b000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:10 executing program 4: io_setup(0x1, &(0x7f0000000040)=0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x81, 0x8000) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000100)={0xfffffff7, 0x4, 0x7, 0x4}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x2, r2}) syncfs(0xffffffffffffffff) io_submit(r0, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffff81}]) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x700440, 0x0) 09:26:10 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:10 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:11 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x5f77}]) 09:26:11 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:11 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x77fad85d, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:11 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x3, r1, &(0x7f0000000100)="d601e8610616a664bb44d61d4aefc9f09cd82044305035abfea876ea79359da50ef920244be9c95911f0e935dbdb6da579c31f4595e6857c1eb20c79a9273a2be77b488eb16668fed46f5ea3d190c59b620d33279ccf8749ce6e969b0c77e4db79f5af", 0x63, 0x6, 0x0, 0x1, r3}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, 0x0, r2, &(0x7f0000000340)="74897efcbb8b626bd6e52f511abe3bf0da193f89ea46ef1f28364e5a8f6074ac60dc1021383eac50286284fa30c9a6830cc06039f43f320c28900ecf94b2fdefb5f276878c9640870c394359cc2145a0c94c9f85c1d658c9367fd64c93f6f39a9a82d5bc45ea41775f4fc22e0f098df96e3e5815e61632c179383d9c0a0940274f9dfb5495365b6dcf0671c5d696ab9bdf857fcbb63be8d39f51c2ef894f6f114afd5d14f8906a72f8447b1c91eec5", 0xaf, 0x10001, 0x0, 0x2}]) 09:26:11 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee00}) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:11 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:11 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x8a030000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:11 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x8cffffff, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:11 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r2) r4 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x1, r0, 0x0, 0x0, 0x1, 0x0, 0x3, r4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) 09:26:11 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x92030000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:11 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) r3 = dup3(r2, r1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:11 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='tra.s=fd,rfdno?', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='\x00\x00']) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:11 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x10000}) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:11 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x97ffffff, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:11 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) ioctl$VHOST_SET_VRING_NUM(r5, 0x4008af10, &(0x7f0000000180)={0x0, 0x80}) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x20, r4, 0xf07, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="ec030000", @ANYRES16=r4, @ANYBLOB="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"], 0x3ec}, 0x1, 0x0, 0x0, 0x10801}, 0x4000845) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0xfffffffffffffd53}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) [ 497.038296][T32092] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 09:26:12 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xaa030000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 497.184727][T32101] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 09:26:12 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) r3 = dup3(r2, r1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:12 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) read$FUSE(r1, &(0x7f0000000340), 0x1000) io_setup(0x1, &(0x7f0000000040)=0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x446300, 0x0) tee(0xffffffffffffffff, r3, 0x3, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @multicast1}, &(0x7f0000000100)=0xc) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:12 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000), 0x4) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:12 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xb8030000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:12 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xc0ed0000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:12 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x9, 0x0, 0x5}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 497.581480][T32117] print_req_error: 257 callbacks suppressed [ 497.581507][T32117] blk_update_request: I/O error, dev loop0, sector 520 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 09:26:12 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0xffffffffffffc8d3, 0x14440) r5 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x4) dup(r3) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x200000, 0x0) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) ftruncate(r6, 0x8200) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) r7 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) r8 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) 09:26:12 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xc7020000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:12 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) r3 = dup3(r2, r1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:13 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xd5030000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:13 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:13 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xd6030000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:13 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="5601df67728848c35b8921e8d0"], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="74a76b4028aa675bcc8cbe48576405c4f213d1733d66642e7266646e6f3d765f166e253a32c8c4b314065bca60feba9053aeac29389169b2ec5a510f2b6ea17cfe35d2c3dc5b3230dc54b08daef9c05c9eda4f4e5db2a1c9b65ef52ea471ac7aa78a40db6ec5bd98c398ceaafe01795db60ba8f80f7b088fb41c531b12ca4f990406dc7e10a99aeeb107fa0d6850", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:13 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = getuid() fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r4, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f00000004c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r10, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r12, 0x0) r13 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fstat(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r14, 0x0) getgroups(0x1, &(0x7f0000000580)=[r14]) r16 = getegid() r17 = getegid() r18 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fstat(r18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r19, 0x0) r20 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fstat(r20, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r21, 0x0) r22 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x5}, [{0x2, 0xc, r1}, {0x2, 0x1, r2}, {0x2, 0x2, r4}, {0x2, 0x1, r5}, {0x2, 0x1, r6}, {0x2, 0x3, r7}, {0x2, 0x8, r8}, {0x2, 0x0, r10}, {0x2, 0x1, r12}], {0x4, 0x4}, [{0x8, 0x2, r15}, {0x8, 0x5, r16}, {0x8, 0x4, r17}, {0x8, 0xb, r19}, {0x8, 0x0, r21}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x4, r22}, {0x8, 0x1, 0xee01}], {0x10, 0x1}, {0x20, 0xe}}, 0xac, 0x3) r23 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r23, 0x0) ioctl$VIDIOC_G_FMT(r23, 0xc0d05604, &(0x7f0000000100)={0xa, @vbi={0x5, 0xff, 0x6, 0x56595559, [0x8, 0x10001], [0x62a0, 0x80000001], 0x1}}) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r24, 0x20000000000000e5, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:13 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:13 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xd7030000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:13 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r2, 0xa6, &(0x7f00000006c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r6, 0x4c01) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x1000f4) io_submit(r2, 0x2, &(0x7f0000000480)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f0000000340)="ccc98c5aff1f5684ec438b86373d59b7c4921f58469b593a30e257103f4682ef832b18591fce2494a0ad41ffa22104ab86b5f88c829995d36e210b6b534c6a3307db9550ef5fe02bbf108c66e81bf6b2f5685d9210c5a20a85655b9b6724cec6c2e695e8b093fb197edcf6f65ef8d59289ec3967f86fb1e076bfbdb7a56a66559f55ecb03a670258454ec5cbe02f70c7d938353690be19243238327efa3272a91dc30177bb31e9ff8215a1ef42e1b723557572b148d9a031d31d07f4a9b32dbdb244d3e7feaba1676ab1f2a0f3cb74494d080711c0c303243a2886a840af66247d71c5aade7a7b1c26ea1b", 0xeb, 0x10001, 0x0, 0x0, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x2, r7, &(0x7f0000000240)="6e19851dc90f29fafcdfc6ff1c64e9f6598812c6603d66ed9e8875ea73e26041b889e668f38f74cda4171e5ba0057945804207fbdaa248b5945620560361225776dc8b951b2976801f93b01eb4932b55dc82d4054eb9c5225e8dab6889d488674afd4dd136c872f51c2957e246f2b2fac9b1648131cbd7aadcc014f450957dbf20c0942908ac96fdf110bc4a7f1d82a5f37a4ec69f216839e4ed7faa27a324ab89ad548cff92d642687f2c779a4e5b404ba881783b", 0xb5, 0x7fff, 0x0, 0x1, r8}]) io_setup(0x1, &(0x7f0000000040)=0x0) r10 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r10, 0x0) r11 = open(&(0x7f0000000040)='./bus\x00', 0x430100, 0x0) write$binfmt_aout(r11, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r11, 0x40045568, 0x12) setsockopt$RXRPC_SECURITY_KEY(r11, 0x110, 0x1, &(0x7f0000000140)='/dev/cuse\x00', 0xa) ioctl$VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000000)={0xfff, 0x3c1e715c3a6ac75d, 0x2}) io_submit(r9, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) 09:26:13 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xe71f0000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 498.729957][T32181] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 498.741311][T32181] buffer_io_error: 246 callbacks suppressed [ 498.741320][T32181] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 498.755800][T32181] blk_update_request: I/O error, dev loop0, sector 4 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 498.767097][T32181] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 498.775583][T32181] blk_update_request: I/O error, dev loop0, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 498.786794][T32181] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 498.795322][T32181] blk_update_request: I/O error, dev loop0, sector 12 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 498.806757][T32181] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 498.815205][T32181] blk_update_request: I/O error, dev loop0, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 498.826580][T32181] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 498.835559][T32181] blk_update_request: I/O error, dev loop0, sector 20 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 498.846839][T32181] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 498.855610][T32181] blk_update_request: I/O error, dev loop0, sector 24 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 498.866895][T32181] Buffer I/O error on dev loop0, logical block 6, lost async page write 09:26:13 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xf0ffffff, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 498.875354][T32181] blk_update_request: I/O error, dev loop0, sector 28 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 498.879629][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 498.879637][ T26] audit: type=1804 audit(1574501173.656:782): pid=32189 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/758/bus" dev="sda1" ino=16801 res=1 [ 498.886638][T32181] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 498.886706][T32181] blk_update_request: I/O error, dev loop0, sector 32 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 498.886715][T32181] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 498.886741][T32181] Buffer I/O error on dev loop0, logical block 9, lost async page write [ 498.917202][ T26] audit: type=1804 audit(1574501173.686:783): pid=32205 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/758/bus" dev="sda1" ino=16801 res=1 09:26:13 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7463616e733d66642c724e646e6f3db01cce4c3a7624aa7cb0f573d65a9ffe1c69d1aceccc6a693cd194f4dec44c1ab85720f749fe55584e2c0000000000000000e9dadc209108cf18a3", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 499.000050][ T26] audit: type=1804 audit(1574501173.736:784): pid=32198 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/778/bus" dev="sda1" ino=16546 res=1 09:26:13 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0414f9f407000904000202000000000000000000000800190000000000", 0x24) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xffffff81}]) r3 = add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r4, r3, r4}, &(0x7f0000000080)=""/92, 0x5c, &(0x7f0000000200)={&(0x7f0000000100)={'crc32\x00'}}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r3, 0x1000, 0x8f}, 0x0, &(0x7f0000000340)="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", &(0x7f0000000140)=""/143) 09:26:13 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xf6ffffff, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:14 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfc030000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 499.294585][ T26] audit: type=1804 audit(1574501173.936:785): pid=32217 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/759/bus" dev="sda1" ino=16592 res=1 09:26:14 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:14 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:14 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/238, 0xee}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000240)=""/162, 0xa2}, {&(0x7f0000000080)=""/10, 0xa}, {&(0x7f0000000440)=""/131, 0x83}, {&(0x7f0000000180)=""/26, 0x1a}], 0x6, &(0x7f0000000580)=""/4096, 0x1000}, 0x2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000001580)={'mangle\x00'}, &(0x7f0000001600)=0x54) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 499.421543][ T26] audit: type=1804 audit(1574501174.126:786): pid=32211 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/759/bus" dev="sda1" ino=16592 res=1 [ 499.555781][ T26] audit: type=1804 audit(1574501174.136:787): pid=32217 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/759/bus" dev="sda1" ino=16592 res=1 09:26:14 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfdffffff, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 499.618150][ T26] audit: type=1804 audit(1574501174.356:788): pid=32219 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/779/bus" dev="sda1" ino=16865 res=1 09:26:14 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)={{0xe4, 0x1}, {0x9}, 0x4, 0x6, 0x40}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xffffff81}]) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}}, &(0x7f0000000080)=0x84) r4 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000500)={{0x3, 0x2}, 0x3, 0x9, 0xf9, {0xee, 0xfe}, 0xfb, 0xff}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xb) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r6 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r6, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000400)=""/207) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r8}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000340)={r3, 0x5, 0x2, 0x1ff, 0x5, 0xf7, 0x5, 0x0, {r8, @in6={{0xa, 0x4e23, 0x7fffffff, @local, 0x80000001}}, 0x80, 0x9c, 0xffffff7f, 0x6, 0x7f}}, &(0x7f0000000180)=0xb0) [ 499.746305][ T26] audit: type=1804 audit(1574501174.376:789): pid=32249 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/760/bus" dev="sda1" ino=16881 res=1 09:26:14 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r4, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x12) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f0000000480)=""/202, 0xca}, &(0x7f0000000240), 0x40}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x0, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r5, 0x1, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x10000, @rand_addr="7a5178b33c468af4d129f07c3fd8bde0", 0xfffffffe}, @ib={0x1b, 0x0, 0x0, {"78450fa69334f36d3330843a84dc705f"}, 0x17c6, 0x9, 0x5}}}, 0x118) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000180)={0x3f, @remote}) 09:26:14 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfeff0000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:14 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 499.851086][ T26] audit: type=1804 audit(1574501174.556:790): pid=32258 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/760/bus" dev="sda1" ino=16881 res=1 09:26:14 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r1) r2 = syz_open_procfs(r1, &(0x7f0000000440)='net/sockstat\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r6, 0x4c01) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) r8 = fcntl$dupfd(r0, 0x0, r7) r9 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r9, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x12) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r10, 0x0) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r11}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:14 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) [ 500.004974][ T26] audit: type=1804 audit(1574501174.556:791): pid=32249 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/760/bus" dev="sda1" ino=16881 res=1 09:26:14 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfeffffff, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:14 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xff000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:15 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='v%\x04H\x88\x1b\xe5\xe6e\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:15 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x3e}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:15 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xff070000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:15 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000680)=ANY=[@ANYBLOB="03360f512187cce3eba91b29a2fa3bb5fadbfe44b6832dc1addee571691e297b58de9ea50301b7878bdabb7236a5db3e1a428bf2ddb7c3f87428d6207f021e201611007aebd940bffa5693993c11e3846851152f04c70589e52d685e1f490a026306721244fcf16e6dc5c539f2b3395b9ee632ab2e34badac1b17cd6f4d79d5b39f19752efc824832b8391d195dacd90de314ede75259fdf8382d76ed3531bf5245553ff056843c8983a091f4e3efdd85d3dc5d3dbc9435b2cff1e1dbecbd9b743b6df9c638cf6659f"], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0x800, 0x0) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 09:26:15 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) init_module(&(0x7f0000000000)='/dev/cuse\x00', 0xa, &(0x7f0000000080)='md5sum:-usermime_typevmnet0#(\x00') 09:26:15 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xffff0000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:15 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:15 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x80082102, &(0x7f0000000000)=r4) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:15 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) writev(0xffffffffffffffff, &(0x7f0000002680)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000080)="2e6d85d2ddce06d85f2a50336610dbbb5c3303d79d4e01edc20f2ba375c3ba568243aed1e3795e7d3fa17fe212f21f228ec80f4f9d001bbb338cb193fedb9e6f64b537784c329066db0aaa10b5e78f41b56fc777a7e4793f2005e5cb79d1635d98bb9e8d2e9d75e41fa4c10fe72d80a135e3dddbc4c34d62d7cf0e183adb30d65cc476ebbda384e5ba4b79d9e0524345bae3d5fa1a17fed155186be5a591bcc7549b2196d493bcb143e4db037d87535dcf110a6ae327340792f6e3373b91ebfca01ac6", 0xc3}, {&(0x7f0000000180)="f61242331d4edcccfa5d30877acf3acf41fbb75d61165645bc7901098e8d56b96af61269828524e6a05a877a7d07d505ec0a9762069deb7cad2672c2426b188cbcb023fe05195d4d31d2d28e52fd387dc8bcffa84c11f7d5c3d2eb99d9683e1a8b497fb4d0e093dc415e395e7abf3265234e33446d889c5ebd8aafa2acf34acf369cdf30c17b1fd62c7ef8ceae1bc11f59d963ba0214915afc0ceecd43e15a756058c0f4bc093a479f2cf18db4aebede88babfd0cebd808435fb7df4f102986566227feb7c14af9d8fe58e1836147798f027", 0xd2}, {&(0x7f0000001340)="761b7a9ce772c4eb57c0cb19340f6ee74212d86e8621251cd9e118f40d8b94b3b1ae06913b5e3b86f9e60dfd5fdab0f5465f7446b4319b249ceebed7ac8245540cacd5fb8e07d4489c87f90342cd39d1b73d9a62402a48cbe26ab2ce9bf426415c5030c92e13cc8ef772df949af0c6cf592708965c54937032e8cc78e5f5027edc124492f6b35d494ae0bf3457624a793a5d9817ceef8eeade698cfabc732fd8", 0xa0}, {&(0x7f0000000280)="129fd290fd5ac183d3839cd5ef15c957d61964fa1c7a4aa2f6df6c17cf1784729a5beb7ea08ceac8f8b904b4ee68246d155940f1a4e12f5b632367ec9732cdf59e21709f5e97281c5cc85b", 0x4b}, {&(0x7f0000001400)="b0a0a6c3c38c438f02b3209aae317f7bf04d0df49ac591834608ffcc3104e2555daabb51563a3b933c390a393af539601476360641c0b24a7757fc13b14ca49ade2ea7c71e3b164bbd336fd52fe8c92f218f4ba378a886e24073a492f8fc1e345fef1bb572dcce63b386cb585a391f7748f961b6db4cdfa07626631280cf2abee4a48d99401e36711fa7e62791d4fe0beb130536771a05d005dedebb1912505ba90da1c37d2e2c831a22baecb5c361d0801a1119d87e1c4198d3830d26f6b5fc3038a5991a5097d25fae8e6be5a372da92767d48dca7663406065319dd72302c65", 0xe1}, {&(0x7f0000001500)="ea3e7bd909b284f76151c6e63ee83f01f3195ae2fcbba5e3d837cd2b0e0e53d780ea5f91fd4b6a8f0cc9c64f3f6d2a5665707f8e5f385000cb6fac9f521dcc05c249e152a3a0e16387341873af5ab6a91f9a1b96089d91cb2ef7fe74a8b4a32794f66e7129ff12bbe47f0a241f", 0x6d}, {&(0x7f0000000000)="bb103dafb02355efc0acfd78cdb175d9bbafbdfd7b319afe63987239aefbd78d795d348e2e", 0x25}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="3c8709d5ef3437a950b41da093667aeda8555ba4cdccc529bdca3e9080d19e5fe23689a0337fc3dab2e695e6bf1464bd1469da5ffd900bd061418a3d1652ff74ea843753cd09bc446e9adf3121c376eeadf8f657e37334bd98f019981bd1fb25beb1ebdce0ccbb1293a6ceef5fe82927ef53b084563025a97da79ae2300c45cd02c245df23917defd72262d45b103c4e91a79208429d401549880720bbd6166d05947c96ced91b1b8e84faecb7a75b25eb99ed102915034fc40de40cd24cff182df19a462f419f4ed12dd10398755f", 0xcf}], 0xa) io_submit(r0, 0x0, &(0x7f0000002600)) 09:26:15 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xffff0f00, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:15 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfffffe00, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:15 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x5, 0x4, 0x40, 0x4, 0xea, 0x7}, 0x2, 0xff}, 0xe) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xffffff81}]) 09:26:15 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x6, 0x1, 0x20}}, 0x30) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 09:26:15 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:15 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xffffff7f, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:15 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c00cf829a0483fb24d83e1950dc5fa6962eefd1892bd23a1380d56e9a634daef88811ba0b93c997039370844e60be1afc95c266d5b061355ed51ef7bcc655cadf26102631a7f6c3dd53a1c98d2e0cf374de84b396e2b2a943a08e8a473d038d03bd23cd763b9b638c04da6afe0f16975bc9b27d3b4bcf2ac9997776b5cab08dfc27296c1b51267dc42d5512b294d32b5e81bc6211d12687950ec1584179b6bb77fb6e1911304cf67e30fe255e695d13d29f"]) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:16 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xffffff8c, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:16 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xffffff97, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:16 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:16 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfffffff0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:16 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x100, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:16 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfffffff6, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:16 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfffffffd, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:16 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)) io_setup(0x1, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000000c0)={@ipv4={[], [], @broadcast}}, &(0x7f0000000200)=0x14) r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) r6 = accept4$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14, 0x80000) io_submit(r0, 0x2, &(0x7f0000000380)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8, r1, &(0x7f0000000100)="d7c854e0c8a587a437c57926f8971daa0e061ff3f4546593c36a84b297a5725547db6fd4e0fce6da12fba7fc7909067ba51e1ab75b3225a6010a952be9f3acef2a10d1770243cf9b506fad7de249c15e07a47bb80de842453825f51eda9e1f58843a9a044a7cc439d2b6c11d84a49d4c32356be3781c0f7eb83676078acded125488e3dd8cc24e7435a6a34be5846de9c24aaf82e1e0a3f1512ef7e7a49499f24f60a67110", 0xa5, 0x7, 0x0, 0x2, r5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x9, r6, &(0x7f0000000280)="55b65924a24226884eeb2ae9e9e025383b070110fd38fc9d6a8f6a316261ad7d6f54ec0d8055275e41f9bb59ace9a6d3740070bdd1d9fa6dbea12c1676d4be9b54755e401d2e96bc38c397d6f2b29bfff7f687123fad", 0x56, 0x9, 0x0, 0x4c5fef62b71afb80, r3}]) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x10000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xb) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet6_opts(r7, 0x29, 0x86a7e49130c474d0, &(0x7f0000000500)=@hopopts={0x29, 0x2, [], [@generic={0x8, 0x8, "8c31985d6644a333"}, @ra={0x5, 0x2, 0x81}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}]}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r11}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000400)={r11, 0xd19}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000480)={r12, 0x5, 0x30}, &(0x7f00000004c0)=0xc) 09:26:16 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:16 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfffffffe, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:16 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:17 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = socket$inet6(0xa, 0x5, 0xbb) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x7, @rand_addr="d92067e99c3307b8440a4ef0e3faab7d", 0x2}}, [0x4, 0xff, 0x8000, 0x800, 0x9, 0x2, 0x3b, 0x7, 0x8000, 0x80000001, 0x3, 0x2, 0x7, 0x2, 0xffffffffffffc929]}, &(0x7f0000000000)=0x100) r3 = accept(r2, &(0x7f0000000240)=@can, &(0x7f0000000080)=0x80) sendmsg(r3, &(0x7f0000001840)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x2, @random="901bf8cbbf26", 'irlan0\x00'}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000003c0)="cc714983f1039966720464860780ac8ad93c466e95f7a5cdac20db8059136947e4fac0e1737d88dbd542ab170b8f93d82a5099bf24a7f73c2ad57e825cc8a718196c3c928ddcef31bb5ff3dcfd76b185d418cb52938f59", 0x57}, {&(0x7f0000000440)="9240c4fc5cd611681c97a8f9d3a2c483ace0a172568c6d1917de12fc79dfde619050d145427d3941b43171ee9c69c7d20b4be24bb3c3b53b5de40c76c94d8b6c997845c5a5491eeffff4ebd87555adee4578174080061e0c1b0e83", 0x5b}, {&(0x7f00000004c0)="94c841741188e03a5691d340cf3daac5e8f4375625a8b22b1ea6584e7ca26cb1a6aa68b09714906e36985d7d8a56d8ec2e20d5eeda6017a720a16ff91a0d22a3643a9201810c7ad786760fe76998ed95e2a576310001e719574343c5b88b7d9c911f8955a1fb1a59db2ff31a4e0852c16fbab235077dedc5045e90c200388033dd1bdb12b9d7b9365acf88937d2e9a246012c76eaa30db968bafcf6bbe628897f49dbf49bfc55c83b6cf190ec5be65c85a33e423d5bff8b0361769e881c88a54a5793cb56cd30bb4f2b1bc4b693398b87ef49f22b198e30cf504c13caa1f6f83e78fc100e1", 0xe5}, {&(0x7f00000005c0)="94b0a7b6e513423ba75c1c893021bbc00965d37aac6635c7d1a8cc9283c786679af2a3ab904b05afdb3c421a9478727d6d5e4a174b1e2d8ec0937179f694044b84dbf012e86b44889e00e176b197401d24a0848ddae66a890fa3fc34e09716f6bc20a38fe1cbe1aaa32deef4d571b4a45bea1649542924914f79adb8f5ca58677a80811a2eecc029286f10", 0x8b}, {&(0x7f00000002c0)="7ed3f2b5788a138b226b7c7147a59a6898f13b5b6bae50078c1a327fdc45eddef0630c7899", 0x25}], 0x5, &(0x7f0000000700)=[{0xe8, 0x102, 0x200, "32c06f58c8fa9b5823c6ca6b5036bffd3daf066b8c11e836b33d363f06ddabf6f9dc6509a45f965090484400ab35058b71e1f36170c38dfd77fceb58b0fd7832974f1999512ae2db6bbf7792ab57a360023b463f00fe963a9de1868cf7cc2926fc7c737f08fa4a7e886e05da53f480b1d0b6a7092ae3106b8c1360d6f6abbf228fbb06e787f560cbdf53c4aa58ba86e2bffc88b1b8cff53778263b57e05e0c24956f66503b1878541b1475609d3502d82e269c0cb17573e4a1007cb6ab0b362f2be587ffef0c8587d0d260a8f5760dd3cefebd9b9e"}, {0x48, 0x102, 0x10001, "03e1ec78508c515f2205b110b992ab5485bb73aaf054c4815d5167b577d91b5f03b19c0bddffc0b074e9fa7cdfeb4b9aeb4bec"}, {0x1010, 0x3a, 0xffff, "178cb7582cfccc9b6cbbbb24050b3b3bb8fa14e63d827b72624920fd3605058d1fee108e85d0d5546b222cc6ee3cac489e56b1a13145c8a2242a84d4156227bd6fc8faab075b317b5d73a17e3d2ee4920e7d45fdd3ad738733f441108e45a53dfd3aea40c1a9d8b08e3dac44e3ecb0805e3adb756a6f8422ccc1794735ed6b2e98a410caed602c11c1a848f617eac4e09e41d69b170cc044e69fdbfbc83827a683be72a1bb8cb2b5ff3578ef33196980477603b48dafa0f700c66765f37952fee5b66901233c67b507d13fc831b855f0dd0dea4b7587f488863fb91ba8ccd9363a36519d1d4e1e43b857ce060c1162ef65b42cd52e5a56ac79a63e4262f75f6c65c8d80c161dc92a9832eb40b8b7e2de3c2a18dac3a86d1440062454164067a7ea0901a101700157b74f281161437d9ea6cf630ae8d04f493d7f84b56ef611df090dae799bcc9eec68ef95d50ad45f646d753387bdf092e5b994b2a85be824dd6e7487e95c69fd04cf78f5ec4693d1171ef09c5a034ea650ac79965c425c1e47d078d42ca04d4aefe14453259ed94d6e6adee311c8849acaf3473540c34110c05c12c0de96618b48b3eb792ef048eaf85c2ac79c85ccf73ec9600c6f9bf33cf93b4d5d8ba9ee7a804ac470bf207a5b11fb6e6822d11873dfdb43281f273eddeb60435e2563eddc0f9dfba05750aba4085cd74202139132bf43350d7a1243408dd5ecb31be2b3e2267fd94e34b970ca2e6b22637673e9aee9d220477ff5240715e21d16902a50facd3645b8340ea9ebbb2ca67cac91563583b509b7de883a5fdda1576c6fe7e790ffbd267a00945941abca55faa4d3b5f14cb12ad45a01708776f125ce6083898bfea074b9b7b49724dcd8835ac56bd8dc604eef762cf24b20f1052e7e212ad9a31272d93f8599eea4bd9e8219057269ef6f1a66186987c597bd36648aeb6dfafff83d95c6726ea7d31f3da10f948c0ae8bf3df4fc07749585e733476b89455d7c857c75a4ef5b4b739b3417c3c8fa2d104741c40ba6ac8ba8f4b60c395682fd2a3588243a400aeb1f7c2c36df75322332c3af78f7688f785227c7ce78fe8ec54632f5bc2541947cc38704d9a041ca83aae2ede63f41ae0b6eb0e4d42387b2db9eb6ba11e879384a15e523cc698b181ed9810cef606000e8df26f27d439afab099eeda8310c4efea2ac491ce2d9ac93e9309a5fc69dcf7f4c6a674a26110c29de08a7f9c6b8c11e34fc3a009ff9208f19ecb05c4c9cff71b3e0fe5d9245c356d2f93b07600d77070e9c6c0693966f17a23e091f78eae7baaceadcb4cfcb4d11156585eaf3b233ee72a04336aec47dbffdfb88cef3d225b92844293c48a6cfe8a0eb83732e1429a46ada4d7cfa16fd8ecae29ff13d2e64b7993441308436315451df18b95e9aa80faf912d3991d02da1dc71d7dbd64fd811aab7b8eed1576d7bd6ce5af28a7e7b17970af528e6bfecb86041092022bc034d076ffd562644a2f4504f5a75ea65fbb0a1d6a1e4df6f49f26ba7af9e2310fb71535752981f2cd79f42e767cad46b10ca5f03cfd357f562b2d6fdd23e8fe22072f7800b144ea104dac6512e3f431234dc22231c9d819d5fa7086b2aac61b60b119f931e1b79a29e203bed411bdf8d878e3d66bb56286b6b26af0e49d68548912cf4d8b1e2cd8214e827ae1070cf82207bd559902c5f1cf6ac35e078333093d93c55d1b2901ca6fd167fe802d45a6f1ba806f5cc6ee8af544daea5ca8ae5fd38dbb38b3d356f0cc497bfe20023e986bd5f03731c62c0db6cd05b53757a4ff717017b830775d848bfcd91504b3432fd2a45539e91d9e81a180c07da9d9ab301c7d3760a3f6be18b15c480c808537f1860ba86baa16982a5e783f8d46b9b30553eb64fed37658a379f2c95c429e33223cfbd69262ac09f724f1abb7ddef7416d6295eccb70b76330e1b725f65994929929fcbb77dd95286b494f88e52f92335df2fbb720705ed5fcbb1982640c4933f53aac6fe1cfe4b42b248bb84cbc3711ef9c05809c9e8f8fc81664c58cb68ad2c43743c94de594cc7a260e18c1fdd71e8f017cd64ca3c64d6b36d4a4ddda4eebf1b20e289fe252993d3616f330344f6159e0df98f5536eb4abf62746e9ad3a885cf437782f91d0dbde2466c5b901891ec1415a49e027ec2e1dfc7235d13e693c73d589a1ceb9a63a4608adc91a1f4f0658a652997cdaea70b7f2b8f78b4dcbaedcb622bdb3872982df09d0a710b94571e3d009fec7eb25afc40a4953019dca35d854de477d16d945a7d96bae7d9000330a456a652214fc17fcee25d916606965cc74f9a0d1f467674fe951f82f267c4095d6215cb8ce03d9cb5fa98ed35b09f83f1ea4c269154fce2fef26c132023f6a3f769e03c289ef018bca6763101780a232b9eb19406fe684f28aed6297cb366d03473ec3d4523435c154ec5f470140f9435b239ff2da2553ad023f3fdf8a4c04e713419146bb5bf5376d6204344c13dce8e81e46444b7bda1fd2a53580c022831979e9002a026f62e0b64c04d639c10b4f4d16b3da1c86f924ba3252be147f0d05a03b5b646ed65d376c8885cbee79be2200ad5865dbb389d4f5a15ec20633b8e7b869adeaf8f6364766c9c2b744a2cc3f42d37d0b2aac010c94559cd88bddb14cd9d0614ef2ff21f5756abbe9a1c2fd6d5f990906fbfd162008f5f066b1236b2d9feb03d04dd5f27d046a1a00829584b1505cdbfe1240b9c15f588dea7e8b5f26e56e8209ce9f875d4c84eafb15345329ecefb42e831961509685e5420758ee14d896b68a07d31776b9b0e3bc3c5ddf86fff2b6a1697a9f8f00ddd18ee934aefc3f12540051a0121eb694a34c18be414f938333612b6f8729b315aeb07b6e0368fe68bad4d3db43e0849831fc1b92f6ca6d4336f5ceded998eedf0e02bd48500cbc2363579059e22ff96f002cfcf070bf03d8db4dc6f813835e5fb8ca0b5fc39ef199a2abd4906f800c4c8b0c0c9e80ad2f30894fbbc4d45abe2c72c43053741d898cb3a4f748c9fd7eca36db41c85196c68b9f1af52d452a933e84cb38b82ba3bfe905d3e17ca518d8f0814e22600011404dae9b09c0a4fc5dbb8ad346047964bb4f14c723c214b40aa26a1ba4b463b4053cdba8d3044750b8eb027afb484ea8945201d92a9b065f866f9c55bb6d15630e7978aaf16f1300d8b1e00a388cf3a5b84cab74a54345ef389fb13c98d163bd91017b69501fc0013577c6b57b82edb7eda745bd503cfb51912625b6412d90bd5407b91abb68cdcecdf73ffd2278964df921179929f4902e753e261f53a68bbb304c163d8ce406f46f293e8a7901e783f0a51f86a9cc2f70f55293f4dde848abbd37ddee17aea0422531cd4b3e8fb7fa963f6a9baf1ea59aa6c302bc953b92b1344d56c02be07d843fc1884b4a4ece01d221e00df14264a1b328fa7334e6ea2c51085ee1977b41aaba37c28771eb47c88afe38979140081bb61062cf861233cc38385a4f7324cea919a78ae5e965f13d84668bcea7f4f9bccb64d4b44de8b59e319d590dc640cb1f4586d65d79169ab55e1259b670e3ec277ae2b2629fcd3e4402844acdc55f049537b68a3fc7e808592c230b4a08d77d1c962062ebe9deaccaa7a1d5d8c6c19d81d776783d1f3f3269540a81b0fdd2ef778fb1b36c5af20f8630bfd28103c983a10c56bd0f43f292cacd845c67ed9ef2cd8912655738ba418b0734164af620e5e29694131f52d1513714681cb1b96b8f34ea572dd8ee354a154ddd25296a78a79479b4d5bff4f5485ee497a4e72a0e0066e33ffe754bbb0dd1daad7fb6f614d5b3016be2f5c30885ebb5f3b4237206fb4de74543cf26029866f9043de46c659ac64838e49322fa3fcd48ebdd41983d224d735072ccae4afcc7c9238170fbed2f9ceb50300d7c699c658737714a7a7b59a40fc6d508bd7937eaf2fcbd537725e039d305c608771921f993275b6e8fda131f47a1c22ee42bac1d85f7dbde5e403825f7989b6e342877411cb97af073dd1123f173cc23aa249240d2cca5831010e3b8296fbbebe95ea7b7d2ec2477c459a8bc40bd9355e0b7b033cc48edac87ada038454fc7e0da16722f324ce17687e1827708bc5a544ce39ea53ecd82c81a873a5d2c2a5450518473434655665f1e0aa72cd29fc4295680a0789afad521db21027f9021ca7787333f0e86fa3419732585cb15a560c0ee0ba4331393e1cbc22259108fb490724eddfd3ea653afed0311f031894ae579dec5bb641a9fac093205b1521efb9bcd1b7c4cdef9b92182c3508ed2b5d5c374f45685fd7dd62918b5cc1613dbd25e46e3f531b2e92b944e938f41964a45d54c2aaad55a21fd66ce935e833cb6c287bb94d569308401c673c347fd039adc5cd946e9c6a8de65b731413eec66aac7c1453a34e9f0633c8326670c386eaaebd25ba92792ba4c1db9f9d6c8fee062caed5b3df910dc56c782e673f4ca3658b82ba1bf86e119d10825b838256359fd70f979938f5ce2afb07e70aafa0eba0edf86bf52511ab3f318d67a1891bba3839faf081bf94b6e0ce762b2c0ddfe8b8205790321c8ce4632ad452a4a69082c6f28c4b3a23f32b8ab20459b3751673377ad9d8ea798f34b0bcb7d0a65baa669e65efaea6f2714900bbf86d617427ca4920d70e778194e177c696027979913903ea8db967d7a324be12209ab2fa10a0d691fa174498c6c3ac7271000a43e5589df2ed8f8365a781e460f3f0efbc59bf68d399f35f691ad32541582b250e2e4d853dad9c942e34f5de05fa031bcaad2fc2d7fc07ebe622fdcfd10900a4c47361b6460f44964cb1135d1977c49c3f9e8468234f9d186ea1696c432a5e126bc2ac1def4165fda26c7fdc34c089995594954cdb99493ae35c03faf55439e818ea22829cacb700e0a18ed902790aac3c15dfc5116e59fcfcc3d07b6ea83ea60611633cb59e6532993f7f0932413dd0bccd000e8c98d01a730d461862df8602261be935ddbfdef031adc3990622a9b050ce77909ba78516b0fafaf9ad0d1520719b20cc66c84f82ab717c511a072d34d2d542945af79b99221bd55dfc2fddbdd78c189b20991f05246bb028e67042312a47fded4c4a8b7cdf1ce82bdf2086104bd17baf228f6aaa2336096eb85984612efc5aabe274fde2fd8d0cd34097865fdc2bebede8bc6b473f0250908815f23898ded806139bd2ef44a25432348561fa84726af1919f08eb6f01a9aa88aa6692923bfc59e2bdd6d39a0cfa6637a7d49c881bff42c9efeded88826236c227baaaac9ed4d13fc166497a0b4550b5a117763c2b1b0b74e722398d0a883df49d107ef2a976efbf6fb95da0abdd8f8b8dc5c027f16cd81d23310810413842204ae935a212bcd62e48b50302ddecf5276dc333cc0a06b08a8b2944aa67dac96fd83a23ff59544024f6fa6c0e8fd4a6256dacd4c4549b3520a531bf8d4ea5886256e252d34bc49374f8839895581c6de0b6169edb91e663ddfbf17ded281ca3234c82fa37151b9b873006eb3f05aecf04bad3fdf2670044399bdcd485214c1ef3db4980707d027de70001030e03aec2028820361ef17ccbf4a31f3896c686b42624751d5344db3d8a85fe71054226ea02b4cf75c1e0c139077f5204088feaff613bc29e4ab8ded63ed0dbd40f8651333fc2cc7f1d0e551be18458b3fb8d685fc87a3e5715c0943f5b12ff90daf777cb6752b07b409ec76630246d5cca2087115014271a54bd3e4872675d1465133c2e9759320220c5945882e64995a590b7ee6e311aff"}], 0x1140}, 0x90) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0xfffffffffffffe8d}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000001880)) 09:26:17 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:17 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xedc000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:17 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:17 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:17 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x4000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:17 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 502.754450][T32457] print_req_error: 607 callbacks suppressed [ 502.754480][T32457] blk_update_request: I/O error, dev loop0, sector 392 op 0x0:(READ) flags 0x80700 phys_seg 15 prio class 0 [ 502.799692][T32461] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 502.800718][T32457] blk_update_request: I/O error, dev loop0, sector 4 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 502.811045][T32461] blk_update_request: I/O error, dev loop0, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 502.822822][T32457] blk_update_request: I/O error, dev loop0, sector 12 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 502.833419][T32461] blk_update_request: I/O error, dev loop0, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 502.844784][T32457] blk_update_request: I/O error, dev loop0, sector 20 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 502.855875][T32461] blk_update_request: I/O error, dev loop0, sector 24 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 502.855910][T32461] blk_update_request: I/O error, dev loop0, sector 28 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 502.855958][T32461] blk_update_request: I/O error, dev loop0, sector 32 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 09:26:17 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfeffff00000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:17 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:18 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x100000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:18 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='\x80et/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x3}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="569e000000cb000000000000000000000000000000f0b653e2c978c8bca9e1fee6831c665dbac1df1fce9b4f704ca4fc14b943246d9d4ec5f104dc8cabf768e5bd9c62043a84c1fd5309b94c4820d769027da24537784f19fa828ffdb382ad6d2ba03addd75d7769a3fddeb288a879f881ad40c38c75862cc41ad464b4a1a9b46d97416eba0afc439cb9ae1693f083496ad86f2eb9626d2e9c313be67c6e72a38f942ca65dc7dc0000000000000000"], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="b3af5c97b616b0a5040e04b96c00"]) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:18 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x200000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:18 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x300000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:18 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x400000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:18 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000400)=ANY=[@ANYBLOB="18c9cca7e2d81841b219bb848cec40679a0893e1a33613164428e470f1c55a00d8d0db26daffc65a2782e1cd0692182f9d7d51b5d2cbaf2d851b55abe10c46"], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:18 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x500000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:18 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:18 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x600000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:18 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000001c0), 0x4) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) syz_open_dev$char_usb(0xc, 0xb4, 0x2) io_submit(r2, 0x0, &(0x7f0000000700)) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000080)=""/22) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r4 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)) r7 = openat$cgroup_ro(r5, &(0x7f0000000640)='m\x81\xf6\x8f+\x80\x00\x94\xeeA\xc1\x96\xe5\xa4\x0e@em\xfe\rs\xf6cu6\x92en\\\x00\x156`\xdb<3{\x9e\xabU\xf2uq^W\x8f\x96\x8a\xc7\x94\x8a~\xb6W\xed\xdc\xafT\tf\xa6<4\x8d\xf7&\xecB\xa0\x99\x9c\xc3&\x0f\xb7\x1dI\xc4\x8dt&\x12\x1b\x1b\xfdr*\xfc\xd9\x92\x87u\x14\x06\xc41p\xbc\xc8\xb8\xca\xeeDu\xe0\xc2\xd5q\x15\xde\x1cu5\x83,\xbaY\xc4\xd0\xc6M\t\x80Y\x81[2*\xa54l\x95\xfd\xaev\x00\x00\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007) fsetxattr(r7, 0x0, &(0x7f0000000540)='em0/ppp1\xc5em0\x00', 0xd, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000025bd7000fbdbdf25020000000c00070108000100", @ANYRES32=r7, @ANYBLOB="100000000000e7826467b0863661c9dd0000ee742e30bde5b4933df89300711d72ca475fc427903123ccee4a"], 0x2c}, 0x1, 0x0, 0x0, 0x4000085}, 0x100) r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x6100) ftruncate(r8, 0x8200) write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f) r9 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x1000f4) r10 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6100) r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r11, 0x0) ftruncate(r11, 0x247) write$cgroup_type(r10, &(0x7f0000000200)='threaded\x00', 0x175d900f) r12 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r12, 0x0, 0x0, 0x1000f4) syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x3, 0x400) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r6, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34}]}, 0xffffffffffffff6b}, 0x1, 0x0, 0x0, 0x4080}, 0x1) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @bt={0x6, 0x47b, 0x200008, 0x8, 0x3, 0xffffffffffffffff, 0x1709875172b193d7, 0xd}}) write$FUSE_POLL(r7, &(0x7f0000000000)={0xffffffffffffff8e, 0x0, 0x6}, 0x4f) 09:26:18 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x700000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 503.938836][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 503.938843][ T26] audit: type=1804 audit(1574501178.716:822): pid=32524 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/768/bus" dev="sda1" ino=17153 res=1 09:26:18 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 503.986878][ T26] audit: type=1804 audit(1574501178.766:823): pid=32541 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1073/bus" dev="sda1" ino=16518 res=1 [ 504.060190][ T26] audit: type=1804 audit(1574501178.816:824): pid=32541 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1073/bus" dev="sda1" ino=16518 res=1 [ 504.181991][ T26] audit: type=1804 audit(1574501178.876:825): pid=32543 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1073/bus" dev="sda1" ino=16518 res=1 09:26:19 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x800000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:19 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[], 0x26ff111a0de261e9) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766c46e6f3d", @ANYRESHEX, @ANYBLOB="2c80"]) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 504.308761][ T26] audit: type=1804 audit(1574501178.876:826): pid=32541 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1073/bus" dev="sda1" ino=16518 res=1 [ 504.370444][T32563] buffer_io_error: 761 callbacks suppressed [ 504.370454][T32563] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 504.385053][T32563] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 504.393503][T32563] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 504.402136][T32563] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 504.405026][ T26] audit: type=1804 audit(1574501178.886:827): pid=32541 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1073/bus" dev="sda1" ino=16518 res=1 [ 504.410536][T32563] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 504.442885][T32563] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 504.451293][T32563] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 504.459795][T32563] Buffer I/O error on dev loop0, logical block 7, lost async page write 09:26:19 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x900000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 504.468271][T32563] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 504.476748][T32563] Buffer I/O error on dev loop0, logical block 9, lost async page write [ 504.551884][ T26] audit: type=1804 audit(1574501178.956:828): pid=32543 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1073/bus" dev="sda1" ino=16518 res=1 [ 504.615980][ T26] audit: type=1804 audit(1574501178.976:829): pid=32543 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1073/bus" dev="sda1" ino=16518 res=1 [ 504.640406][ T26] audit: type=1804 audit(1574501178.996:830): pid=32541 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1073/bus" dev="sda1" ino=16518 res=1 [ 504.675631][ T26] audit: type=1804 audit(1574501179.046:831): pid=32541 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1073/bus" dev="sda1" ino=16518 res=1 09:26:19 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(0xffffffffffffffff, 0x1) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:19 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xa00000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:19 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:19 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r3, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fstat(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r5, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fstat(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r8, 0x0) r9 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fstat(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r12, 0x0) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000340)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000380)=0x0) r15 = creat(&(0x7f0000000100)='./bus\x00', 0x4) fstat(r15, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r18, 0x0) r19 = getgid() r20 = geteuid() getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="280500000000000001000000000000000400000000000000030000000000000004000000000000000400000000000000000000000200000005000000000000000700000000000000010001000000000003000000000000000000010003000000040000000200000003000000", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="3f000000ffffffff0000000005000000000000000001000000000000060000008461341f73797374656d0000060000000000000002000000000000000900000000000000010000000000000005000000080000000500000000000000090000000000000006000000000000000600000000000000000000000000000009000000000000008d080000f10f000000100000ffffffff00000000", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0300000001800000000000000600000000000000090000000000000003000000030000002e2b5e0000000000040000000000000003000000000000000200000000000000ffffffff0000000007000000f7ffffff020000000000000005000000000000ffff000000000000000800000000000000020000000000000034000000000000000100008001000000b40000000400000000080000", @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="06000000060000000000000003000000000000000101000000000000000000000900000004000000000000000300000000000000fdffffffffffffffffffffff000000000100000000000000030000000000000008000000000000003f0000000000000008000000000000000700000000000000001000000000000007000000939d00000600000000000030f8ffffff", @ANYRES32=0xee00, @ANYRES32=r10, @ANYBLOB="080000000000806900000000020000000000000000000000000000000a000000050000002f6465762f63757365000000000000000300000000000000000000000000000002000000000000b47599ac7b89ccbddc49c27600ffff0000000000008100000000000000020000000000000005000000000000000000000001000095b6000000000000000400000000000000f7ffffffffffffff06000000090000000002000000100000050000000062831e4d688d09abc4b1cbf3ff50c5258f8badf7c1ff6f57d7f7956e1609a61491c6a2d3fafcbe5210cc52a07350033994a2a771ab15c431ffd300a2958282d46d3c2a61f7bb2c213ba23750df74703e0cd812d65750a5963aea1c3b9ddedca6a8ab6dc6ee608f018beced9831e926b5e147984baaf12d2ba38b785bafcf6daa11afd803b9242f2c8d6c56cd12f3a775e16f84ced9", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="00000000070000000000000000000000000000000a8651070000000008000000000000007070703073656c660400000000000000030000000000000009000000000000000600000000000000ffff0000686c0000060000000000000001800000000000000000000008000000ffffff7f000000000700000000000000010000000000000009000000000200000100000006000000830d0000", @ANYRES32=r14, @ANYRES32=r16, @ANYBLOB="01000000fbffffff00000000000000000000000007000000000000000a000000200000002f6465762f637573650000000000000005000000000000000000000000000000ff00000000000000050000000000000006000000f7a0000004000000000000000800000000000000001000000000000000080000000000000500000000000000000001000000000080000000080000007f00"/160, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="0100000000100000000000000500000000000000090000000000000009000000825100007468726561646564000000000000000000000000000000000300000000000000810000000000000007000000000000000400000006000000000000000000000009000000000000000000010000000000090000000000000006000000000000001d0d000000000000080000002b000000a3ea00000000008008000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="06000000ff01000000000000000000000000000007000000000000000900000040af020074687265616465640000000000000000"], 0x528) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) setsockopt$inet6_tcp_buf(r1, 0x6, 0x17, &(0x7f0000000000)="25d9e1042519ef6c77243bea7b87750de8cb95550db77b0724bf8c1f43115810733afac497daf6735e27e56ef14045594a47792e60afe76ebd5d", 0x3a) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r22, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:19 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xb00000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:19 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xc00000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:20 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x5, 0x2, 0x1}) io_submit(r0, 0x200000000000031e, &(0x7f0000002600)) 09:26:20 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xd00000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:20 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x3}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:20 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:20 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xe00000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:20 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:20 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfffffffffffffff, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:20 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000100)={0x10000, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xb) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x4, 0x1, 0x3f, 0x5, 0x1, 0x3, 0xc4, r6}, 0x20) 09:26:20 executing program 1: epoll_create1(0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:20 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1000000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:20 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1100000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:20 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1200000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:21 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000001c0)=0xbf) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev\x0fcuse\x00', 0x2842, 0x0) io_setup(0x400, &(0x7f0000000100)=0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000180)={0x0, 0x7, 0x0, [], &(0x7f0000000140)=0x3}) io_submit(r2, 0x2222, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0xffffff3f, 0x2000000007}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 09:26:21 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1400000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:21 executing program 1: epoll_create1(0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:21 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1700000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:21 executing program 0: io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r0, 0x20000000000000e4, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44ccbc56}]) 09:26:21 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1f00000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:21 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r7, r6) r8 = fcntl$dupfd(r7, 0x406, r5) r9 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r9, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x12) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x8, 0x1010, r10, 0x0) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r11}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r12 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r12, 0x2) r13 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r13, 0x2) r14 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r14, 0x2) r15 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r15, 0x2) r16 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r16, 0x2) r17 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r17, 0x2) r18 = msgget$private(0x0, 0x502) msgctl$IPC_RMID(r18, 0x2) r19 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r19, 0x2) r20 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r20, 0x2) r21 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r21, 0x2) mount$9p_fd(0x0, 0x0, 0x0, 0x1004800, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRESHEX=r11, @ANYRESOCT, @ANYPTR=&(0x7f0000001a80)=ANY=[@ANYPTR64=&(0x7f0000000400)=ANY=[@ANYPTR64, @ANYRES32, @ANYRES64=r17], @ANYPTR=&(0x7f0000000440)=ANY=[@ANYPTR], @ANYRES16=r11, @ANYRES32, @ANYRES32=r18, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRES16, @ANYRESOCT=r19, @ANYPTR], @ANYBLOB="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", @ANYRES64, @ANYRES32=0x0, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES16=r20, @ANYRESDEC=0x0, @ANYPTR]], @ANYRES32=r21, @ANYPTR64, @ANYRESOCT=r21]) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:21 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2000000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:21 executing program 1: epoll_create1(0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:21 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2010000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:21 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0x20, 0xb, 0xc, 0x18, 0x7, 0x3, 0x3, 0x88, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xb) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r4 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000340)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffe, @null, @netrom={'nr', 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r6, 0x200}, 0x8) io_setup(0x1, &(0x7f0000000040)=0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000280)={@broadcast, @dev={0xac, 0x14, 0x14, 0x22}}, 0xc) io_submit(r7, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x1}, 0x7) 09:26:21 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2500000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:22 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r6, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r8 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r8, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r7, r7, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r7, 0x4c01) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) r9 = fcntl$dupfd(r6, 0x0, r8) r10 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r10, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1) ioctl$UI_SET_MSCBIT(r10, 0x40045568, 0x12) r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r11, 0x0) setsockopt$inet6_udp_encap(r11, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r12}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="748a109f8545d3aad4bb7261b96e733d66642c7266646e6f", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:22 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2800000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:22 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2900000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:22 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sysfs$3(0x3) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) finit_module(r2, &(0x7f00000000c0)='\x90!%)*ppp1wlan1\x00', 0x3) fallocate(r1, 0x0, 0x0, 0x1000f4) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x640000, 0x0) r4 = eventfd(0x2) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0xdb1e9b64494cd977, 0x0) io_submit(r0, 0x2, &(0x7f00000002c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x38, r1, &(0x7f0000000100)="2bd40686badaf61a37c4ba8d84c944384937ac4c45047ea9b368772ccc3f9fb323e232ce92d4f3b7d23d24c7678c8c1b46c268256afc015e1db0fed4f0ec57f9fb238d1fb674e0406bb7f05ee2b31abce040033a645e74c2dee3199d8634eda1ad7fa418418afc6769f81fd0bc74110862c50caec2c97b16e2398cd2e5753162a40e622c961fa3153c9122be4be98b6e77f741a62336b1702716dd51a29ed1dbc2e0e3680e22fb01fbaf3f7d20ec7087548ba548d4f04d94937e9ab82c9108e23b122478ba2abe25", 0xc8, 0x0, 0x0, 0x1, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x100, r4, &(0x7f0000000340)="d6c79781ed6f94f6fc2515f80ced1c56c079ac686fe6727d13fab85f22907c0135f2c4c0a20177f8927fb3672b6d554e359cdc7dd7c01b4c5678747efda7e2f5acc3df5c7e6a5760d9d7cd3614667db1e2b11ada14510e431fe51b29597c3cf5ca5fb4d450a15abc31e3841b3d907347e4c4e333e1cf4d1fb50539b414c37104d5d67b4356fb5fa24de9", 0x8a, 0x0, 0x0, 0x0, r5}]) 09:26:22 executing program 1: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:22 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2a00000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:22 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x3400000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:22 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x3f00000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:22 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)="8878e0b8d8fbf69dd4b0a5920479af74d2c3d4e8a79094f7abe5149d48b41a67c73cc891f56acc53a5fb13dc59b305878dfb12699ba7a547b7c9f65b", 0x3c}, {&(0x7f0000000080)="18e86315b1ceaac6de69906236a019a616514a68001d146d92add771048c3da07469925798b030a45920f47c5bc3d6420708607604ff1ea83bbf27", 0x3b}, {&(0x7f0000000100)="b2c0ed533aa50ff72d9cd373554907e42e6d9f9d57db50ea4a60fc03fbb15cb7f85391d4fa53065be46300bf7205e57eff30fef3b0dd152b0e066218b4bc5f24a54d6bfebb2e76ea17863b4e0939b37c1c9b61b98a3fe30cf9470c1654f5cbf48b71a06b82d0df62b09c81a739d3", 0x6e}], 0x3) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) [ 507.826113][T32757] print_req_error: 447 callbacks suppressed [ 507.826148][T32757] blk_update_request: I/O error, dev loop0, sector 392 op 0x0:(READ) flags 0x80700 phys_seg 15 prio class 0 [ 507.854606][ T307] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 09:26:22 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x242, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 507.866017][ T307] blk_update_request: I/O error, dev loop0, sector 4 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 507.877790][ T307] blk_update_request: I/O error, dev loop0, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 507.889190][ T307] blk_update_request: I/O error, dev loop0, sector 12 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 507.900648][ T307] blk_update_request: I/O error, dev loop0, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 507.911950][ T307] blk_update_request: I/O error, dev loop0, sector 20 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 507.923284][ T307] blk_update_request: I/O error, dev loop0, sector 24 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 507.932716][T32757] blk_update_request: I/O error, dev loop0, sector 28 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 507.934669][ T307] blk_update_request: I/O error, dev loop0, sector 32 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 09:26:22 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x4000000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:23 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x68000, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000080)) 09:26:23 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x400f000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:23 executing program 1: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:23 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x4000000000, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000400)=ANY=[@ANYBLOB="56086ea079f3f711bfaa9c0539a8274939de0d667d42c8eaff8b0a76ee10c1a41107348fb762a274e2eee1f60c3c3c9e1bab88838cdba0118c3e6f62ca6b480f94379b15f7f03390502f23e99fdc5eb47ff915b4ed7ef27202425fff4fbda3c5a3765d6e679ae06d2a557763e300"/125], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:23 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x4800000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:23 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_getevents(r1, 0x9, 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:23 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x5c00000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:23 executing program 0: io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r0, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffff81}]) 09:26:23 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x6000000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:23 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) acct(&(0x7f0000000000)='./file0\x00') 09:26:23 executing program 1: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:23 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x6b00000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:23 executing program 0: io_setup(0x1, &(0x7f0000000040)=0x0) r1 = socket(0x10, 0x3, 0x0) flistxattr(r1, &(0x7f0000000000)=""/10, 0xa) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x42002) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) io_submit(r0, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffff81}]) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x86b9a27bf1ffddd5, &(0x7f0000000180)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@sq={'sq', 0x3d, 0x4}}, {@sq={'sq', 0x3d, 0x7}}, {@timeout={'timeout', 0x3d, 0x40}}]}}) [ 509.112943][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 509.112951][ T26] audit: type=1804 audit(1574501183.896:861): pid=382 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/775/bus" dev="sda1" ino=16517 res=1 09:26:24 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x77fad85d00000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 509.251842][ T26] audit: type=1804 audit(1574501183.896:862): pid=347 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/775/bus" dev="sda1" ino=16517 res=1 09:26:24 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x8a03000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 509.378458][ T26] audit: type=1804 audit(1574501184.146:863): pid=374 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/797/bus" dev="sda1" ino=16543 res=1 09:26:24 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2000000000000194, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x0, 0x0, 0x4}]) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)="466062aaac2b47a891d985fcd9bd7a1df4e37247abea85816ebcc315055882d276e02dc1e03df05a937a77bb3ae4197d8c97c0becaf5829ede872af23d5cabe997ea7663b8f84855acf702c7ab21b4e27a77e4572bed8d1f533589b14f7aa86f6150bbfd9ec4d5d5fe0cd15ade44df81b4f44944474c765ccdafdf3a57c6a2e4e1b4486b663c5e769eed30760cda5b57d5f99f10500c21285a", 0x99}, {&(0x7f0000000340)="098e4ec3c7a19a67bb6151efb54e84e64c89dbdd6317eb6d4aa68b2c3adcf4a9afcf6239d11e780da73354833bf071a67af0dcf24cecd2190da4b4c935bfb781502cfe1592afca2de58345511ec0169371ce38d4b62c6eb7b111a757567ba15bfac7a75019416fb1f37227c21588165f1e8ba09f678aba98e2556c658e2c65fb9c885093d0ee184c6d0c56600c16fab897913767629161f8bbd3c46d444184dba6dc6e03e75825bbaf09053ac15ffe084cbc37d4b8c56619afff174daccef8efff2186a910b917", 0xc7}, {&(0x7f0000000000)="5d534737e9f75d7c96a39257cb8d4ded9b4e7206822d0beb8b765d", 0x1b}, {&(0x7f0000000440)="2738a64a4697440c49de871bc24282347c354a1111f6232003b9024c4aaacd7377718f7cb2dc66e570aaffe24976b4201b451d4cce4d246a2fd9609fd5e3fe4e0eee3a4b7cc48cb37a08177c205b7ce290d422b4bac974d5573c29fb6951e20427f26d68751632b18da1c56d73dcb63d702963eb6bcdde671121371ebd07f3283aef2f6da3b272725d42cc06ddf963eb01c253e3e8baaece2af11874cd6bf4d0f873bee67e0d90fa29d93ce2e0135438c65749ae74cb9610f009eb9765c69b04cf1f4c7b5729b0", 0xc7}, {&(0x7f0000000540)="0fe4918dc4ea7aa8b97c9380ae1318d6567d341b6f1344f7a7a82632cad1ac7a3e7b8c8300c288db9dcc0f0a4cef50e04e0d84bf19accb3e482fc9e9c1bc112469170e1db868bca9d685d1718a8169f5c81f0538a53b2cc48bf60914becf42b79c7cc42e01f9610491e2b23b8db55f19196032057352e4f11a1c599fa703ae0f5a15931e27459a844b07fb5c", 0x8c}, {&(0x7f0000000180)="1cedf93068c7e31eef4bc0a1eb3f81b0b294fef508613310481ac85cc9de3b40dc648c0e0d43719fc118193af0b32af0ecfe9b36a8743dcec51b6a49975c2142c07c9e2556060a1f55458fd45a6128bf07e465609f850275ac3cf3a6358fe02728eece92aa4039bb0ca8676e8b5f07df29dea2c3d37e4c1576", 0x79}, {&(0x7f0000000600)="f885aaa24bdd2926013eb75da16ace04a9dfcd9fb976bd08eeb45269b15c36d58c2e665afd0d0f69a5cf6ecede3ca9e30ac3e4818748b19fe5b8d47f90ab8c704dc567987f28517034d86771c2e498e5cf7ad63ea0c981e46c52553a441138c50104bef0c860ad36dbcc5814bf57d8199b33ea31f6bdacb8fd93c040803f8d22dbccb2ef3986b80e31e64f7d41ce929f3f6948c20138af3bb39c431968005db7c50b433ab2ffdea9c27cd8a4a0c5cca4c2af4ee53fbeae02c22d5eb6bc0ee7665f5ae304518cd37e34f7832c0911982fd64ad62a5a3c9cfaa23897df410aff594930b865e8034eb643a4adf4e214b20ad8e71c82ec95", 0xf6}], 0x7}, 0x4) 09:26:24 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x8cffffff00000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:24 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x200, 0x0, 0x0, 0x10001}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r8 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r8, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r7, r7, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r7, 0x4c01) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) sendfile(r5, r8, 0x0, 0x20024000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r9 = fcntl$dupfd(r0, 0x0, r6) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="56937585e44eace4cade7c7c01066d40551ac822f9be1e3773eb5270859dae95da9ffd7ece2c2d82e5f464a140e31f45c4db1315317bf6339f2c04e2ee0c788e0ddef7d36ed0bcc08be18bd51804105f56d1fa29af172f1a4beacf62f596313825ad76c69ef3a36cfbcfa1cbd2363a16fa3cdd8b48ff3995e62fed043f74ee6f53ef13355e3ab7c7ed9794f98e5cae2e3aa237ff3ec35c91ac120b328147be8dd538a5016f594ad00b03486d1fd19b3fd6bcc2093f8a6d3c9494b49c95aee4f11d36c1891d871d8c88510bbdf76fc31e88f3337fe25a49d037c7f6968152c1c5ed3ee7896e5d"], 0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x12) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r10, 0x0) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r11}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="000995d021f698f8d1bd3981eab4df7edf7efc", @ANYRESHEX, @ANYBLOB=',wfdho=', @ANYRESHEX, @ANYBLOB="2c00321da2b5bdc3cf82fb2983d67142869a31ae59df6da9d375e83daae37ec50bf6985e80512143bd115d1485dc7589cadfe24ab7ddb9df2a628332827ffb3f31bad63ed62d2afb442706604f078b135c81ac08"]) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:24 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:24 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @remote, 0x9}, 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) 09:26:24 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x9203000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 509.775283][ T26] audit: type=1804 audit(1574501184.556:864): pid=419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/798/bus" dev="sda1" ino=16615 res=1 09:26:24 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x97ffffff00000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:24 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x27, 0x3, 0x0, {0x4, 0x6, 0x0, '%ppp1!'}}, 0x27) io_setup(0x1, &(0x7f0000000040)=0x0) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) ftruncate(r5, 0x8200) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) r6 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={r7, 0x37689b88, 0x2, 0x10000}, 0x10) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x100}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x0, r3, 0x0}]) 09:26:24 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) r10 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x40) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f00000003c0)=0x4, 0xffffffffffffffba) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r11}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:24 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:24 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xaa03000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:25 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xb803000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 510.168632][ T26] audit: type=1804 audit(1574501184.946:865): pid=450 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/799/bus" dev="sda1" ino=16617 res=1 09:26:25 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 510.293428][ T26] audit: type=1804 audit(1574501184.986:866): pid=445 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/777/bus" dev="sda1" ino=16616 res=1 09:26:25 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xc702000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 510.387422][ T26] audit: type=1804 audit(1574501185.026:867): pid=445 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/777/bus" dev="sda1" ino=16616 res=1 [ 510.477169][ T26] audit: type=1804 audit(1574501185.166:868): pid=458 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/777/bus" dev="sda1" ino=16616 res=1 09:26:25 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xfff}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6c20}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:25 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xd503000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:25 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 510.597427][ T26] audit: type=1804 audit(1574501185.196:869): pid=466 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/777/bus" dev="sda1" ino=16616 res=1 09:26:25 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x200000000000026a, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81, 0x1}]) 09:26:25 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xd603000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 510.759844][ T26] audit: type=1804 audit(1574501185.206:870): pid=460 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/777/bus" dev="sda1" ino=16616 res=1 09:26:25 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:25 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xfff) 09:26:25 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xd703000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:25 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:25 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000400)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:25 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xe71f000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:25 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x2, 0x400) perf_event_open(0x0, 0x0, 0x5, r1, 0x13) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loopEC', 0xfffffffffffffffb, 0x182) r7 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r6, 0x4c01) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) r8 = fcntl$dupfd(r0, 0x0, r7) r9 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r9, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00'], 0x1) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x12) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r10, 0x0) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r11}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="b4f30cdc823aff7472616e733d66642c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:26 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xf0ffffff00000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:26 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:26 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xf6ffffff00000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:26 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfc03000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:26 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfdffffff00000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:26 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:26 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="56f7c97e309054e4f9259dd4217e64c34900feb66cba0234476f089835cdf4c0b8fd853a6f43a12cc33bc3ad87fca706df63001b89fe99990498d2bdbcc977d5a6a42c63f8b71a299daf8b51d5bc1f8be1bd99de784582774eb2a95d6d2b2889fa1f604ab53a94de6de0fbe44bd279932b91ca8b429a"], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r10, 0x0, r10) 09:26:26 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfeff000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:26 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) openat$full(0xffffffffffffff9c, 0xfffffffffffffffe, 0x400, 0x0) ustat(0x0, &(0x7f00000000c0)) r3 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001500)={0x0, 0x0}, &(0x7f0000001600)=0xfffffffffffffdb4) quotactl(0x3ff, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f00000005c0)="6194bfc1515780267169bbec03c3a59ceb0653b10174490ad6a482e47fb1557b1aca87f583b9f66a511361e0f2a709a44c3a070092434dc5cb3ed99d484dea7d030b2d21572cbe073d7b8e975935530ffd3000c51212e68504ffffffffffffff00dac2d638c5d00ddfb304f76b46518c674f1b1feb51ab62a7c58363b4369766551dfb274181eb456ee28f80af7f512bbb5847681c6257c6b78552ee44c0bf44215b8ea6dc12bef0b8cfe9237d0d53e2df8937e91622be38e0e8c4c7c7bf61e6be18bcd27dc7b716d5f74a6a4e2729582d7e") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r7, r6) write$binfmt_aout(r6, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x12) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000013c0)=""/198) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="29ea184eb3a9d15dbc26cd874fb4885a84e0fa9ec90000326f3077d8efb8e2ebc94415a24727ae128dd309b3e87d56740a4123e9fbdbbcec0200bdd9ef7f9cda1c525e2a403be8fbcea7fa2ed482f4e906ba2756e85b554bd43fa6780e3d61c7d5e0066f4681c26b73af10b2fcd13574e8178ef045a0f222e194c0a33161bbf6ecbaaed311a76cf9c7cff5c951942df8ff6336b21d955a793086720225134cd1f3598754e1b33cc5f04195ae5fb08fa9"], 0x1) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x12) r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x6100) ftruncate(r8, 0x8200) write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x800, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r10, 0x1, &(0x7f00000006c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}]) io_submit(r10, 0x3, &(0x7f0000001380)) 09:26:26 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xfeffffff00000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:26 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:26 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x5b) fallocate(r1, 0x0, 0x0, 0x1000f4) write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:27 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xff00000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:27 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0xdbab6b5ba8446b9b, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="4115bcde99465b7d8735b67acbb4f27b86ed8dec7e34c222de2f6aa168d0de07cc305e5c241db8a9fd252f125ba5285e16218223a8f299c212e51c744be21fe830090740303b2a3a4c7610b6c98c1e20fa9a03dd34810cb969ea172485", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:27 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:27 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xff07000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:27 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x8000, &(0x7f0000000240)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xfb8d3191deb5815b}, 0x2d275122b7f0ae88, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="220329bd7000fddbdf25010000800000000000f9ff72696d000000100030cca1cf52441afe5c616d300000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 09:26:27 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xffff000000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:27 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:27 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000400)=ANY=[@ANYBLOB="56b019fce6e222b1bead07977b5235868590dd66c59f33b6ab9100d7fb3e1884008e10da6896d944a4617eac5c1e721e76080664bfc8ff4231dacfde4495024bddbbf5a809c97f33b771aea1173ddb91bd91de82f8d6dea8c37964a0078496c2afaf3947cf54d72ef074be285dd99faee9089abf7b998211d6b2a9adc60e553f671948b94a200afc4d0c810215194198f891dc510eeb005338467dbb3883f096ca46ed323108beadea3d5f81bb7fa9ec9681dfd9f7203e4c78223a7ca4adc5"], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:27 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = dup3(r0, 0xffffffffffffffff, 0x180000) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x3, 0x9}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0xffffff81}]) 09:26:27 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xffff0f0000000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:27 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:27 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/a\x9e[n\xe9p\xc1~1\xc7\xd4HJ\x9ak\x15\xeattr/sockcreate\x00', 0x2, 0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:27 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xffffff7f00000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:27 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:27 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xffffffff00000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:27 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x5, &(0x7f0000000240)=[{&(0x7f0000000100)="9edea37f5ce854256464def9037123442da8caf656a58f574164b1f2bde3", 0x1e, 0x75b}, {&(0x7f0000000340)="994a09969b59d163fe622453538d205cead77490d02f7c2141fdf0e923672c114e6800ebae45c28bb6b78c3b951df19d9caa813f91b7f6361912e88340e1e76915787afda1dbd2ff66caeaf0932e108db6596b92b96f07debd9926180963c3d905dfd9518824b07b2f2ed08b75aff5c02339a8acdda326dc18e370f1f4deeafd6b3dc930880ef3a5a910226167e9612439b09ecb27f2048848ca324fa3d1270d15a425c7553ca49785386b207f01f707e68ac6dd9560d5404a08ad1ae1bf31f348f9d407cd5c1cd762b49ed31f4c0542711f47fdfeab83d92233a995275967b3b1783bd2", 0xe4, 0x3f}, {&(0x7f0000000140)="3d7dc6acc2a6cd3b6fab81091c1aebc1d09bd82d47f0a283f1585c525675f0447de3f22c85677ee03af93b0b563418dc28f32e0f6be3f6d433861f3cb82e57641f2c226a8989cb5693166028f6a4ea5c82ba23b5aa3b4de7f4ee08f4ead714c98a68b3fa4fac0991f58404690bbfd78c4552aa16676af4", 0x77, 0x8001}, {&(0x7f0000000440)="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", 0x1000, 0x5}, {&(0x7f0000001440)="1686877f46a3ea0cb666f246e8ea59b9f9b0812ad8df20f323c3471cbae60bfe55c602893495dfb0b9fffa4fc6ed0fc74e506ec89936201e00b4013ba742ac9c2a4bd1d9692ac925accd78952bd18937129dc35c6fa0598b6d205a534ae32b64ab9d906a69c4ef83695789c796f7f9583f0c9ab499ab8ce518ab89e98f51c8c50d74098fae37233d8a67899852e939050adc303a7277db9be88b24a0db1206930c35e956183137b5220304ae7bde17d47fbadaba813839080a6501b6ec09140a5d186ecab77bf7ffdc661bedf4779e47bbf45f8e8a", 0xd5, 0x5}], 0xb02090, &(0x7f0000001540)={[{@errors_remount='errors=remount-ro'}, {@case_sensitive_no='case_sensitive=no'}, {@case_sensitive_no='case_sensitive=no'}], [{@appraise='appraise'}, {@subj_type={'subj_type', 0x3d, 'system'}}]}) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:28 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xffffffffffffff0f, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:28 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r1) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x81, 0x4, 0xec, 0x0, 0x0, 0x8, 0x40, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1a6b04d0db114661, @perf_bp={&(0x7f0000000000), 0x4}, 0x20, 0x1, 0x7, 0x8, 0x8, 0x0, 0x7ff}, r1, 0xd, r2, 0x3) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r4, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x12) fcntl$dupfd(r0, 0x406, r4) 09:26:28 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'%rans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:28 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 513.535888][ T652] print_req_error: 90 callbacks suppressed [ 513.535902][ T652] blk_update_request: I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 09:26:28 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'/rans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:28 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="567307f5e51721ccb46e51d951688244fd85a0e4d7e4ddb746af6c7ec5a812b78e2aa3fba2cd41170a2753f68a7c352368054aca085fb5c4f30ad9d5b8409b75e91a067e549b472d2f3d9b3710f9af58b111a47bdc92fac18c24bc2076b0899f6eaa9983a0daa5"], 0x1) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x12) finit_module(r2, &(0x7f0000000100)='threaded\x00', 0x2) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x200000, 0x0) openat$cgroup_ro(r3, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000340), 0xfffffffa, 0xa512cb19845b9dd3) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r4) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r5, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 09:26:28 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x400000008, 0x646c82) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:28 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'\\rans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 513.753678][ T690] blk_update_request: I/O error, dev loop0, sector 1024 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 09:26:28 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:28 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'t%ans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:28 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'t\\ans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:29 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000400)=ANY=[@ANYBLOB="40bd185ded2560edff1bcc307469e3dc68ff08a60e3b58e8b9a159eca9a4cb7657203edb13171c8301827bc82c67742dc84421a7b81c8824e0baf40b5dd9c4f9bff7d266a4116fe06d88038f9fbb240f9ee9dd286e2e9e29aa96ad50555aea55b44b7c90bd76dfbdd7885c9ceb4098fc948907380b3a567f55f5c69b0169e74616958a88b535feabf4"], 0x89) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 514.213211][ T718] blk_update_request: I/O error, dev loop0, sector 520 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 09:26:29 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000780)={@loopback, @remote, 0x0}, &(0x7f00000007c0)=0xc) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@ipv4={[], [], @rand_addr=0x8}, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x200, 0xb19c, 0x410, 0x5d3648cd2a74600d, 0x9, 0x100, r4}) [ 514.304001][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 514.304010][ T26] audit: type=1804 audit(1574501189.086:906): pid=718 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/811/bus" dev="sda1" ino=16535 res=1 09:26:29 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tr%ns=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 514.441643][ T26] audit: type=1804 audit(1574501189.146:907): pid=736 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/786/bus" dev="sda1" ino=16539 res=1 09:26:29 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:29 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tr/ns=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 514.516970][ T26] audit: type=1804 audit(1574501189.176:908): pid=739 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1100/bus" dev="sda1" ino=16638 res=1 [ 514.567538][ T26] audit: type=1804 audit(1574501189.246:909): pid=736 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/786/bus" dev="sda1" ino=16539 res=1 [ 514.693653][ T26] audit: type=1804 audit(1574501189.246:910): pid=746 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/786/bus" dev="sda1" ino=16539 res=1 09:26:29 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c30d9566500"]) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:29 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tr\\ns=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 514.800482][ T26] audit: type=1804 audit(1574501189.316:911): pid=747 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1100/bus" dev="sda1" ino=16638 res=1 [ 514.854302][ T753] blk_update_request: I/O error, dev loop0, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 09:26:29 executing program 0: creat(&(0x7f0000000180)='./bus\x00', 0x2) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="b2"], 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) r3 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r3) write$FUSE_LK(r2, &(0x7f0000000080)={0x28, 0x0, 0x5, {{0x200, 0x80000000, 0x3, r3}}}, 0x28) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x12) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x2, @bcast, @bpq0='bpq0\x00', 0x3b, 'syz0\x00', @bcast, 0x1, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r4, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) ioctl$KVM_DEASSIGN_DEV_IRQ(r5, 0x4040ae75, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x400}) 09:26:29 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tra%s=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 515.054816][ T26] audit: type=1804 audit(1574501189.686:912): pid=764 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/812/bus" dev="sda1" ino=16637 res=1 09:26:29 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 515.161159][ T26] audit: type=1804 audit(1574501189.756:913): pid=763 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/787/bus" dev="sda1" ino=16638 res=1 09:26:30 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="d4672f313b4c2aaa56"], 0x1) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x12) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0xf000, 0x115000}) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:30 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tran#=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 515.326191][ T26] audit: type=1804 audit(1574501189.816:914): pid=775 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1101/bus" dev="sda1" ino=16636 res=1 09:26:30 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/`ev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:30 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x800, r0, 0x0}]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 09:26:30 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tran%=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 515.532938][ T26] audit: type=1804 audit(1574501189.836:915): pid=775 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1101/bus" dev="sda1" ino=16636 res=1 09:26:30 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:30 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tran*=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:30 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0xfffffffffffffffd, 0x387183) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x1600, 0x4) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:30 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x5a, "7e8f94f67175776d7ba7a41635588bd9231dc5b55eff2339222bc6a675f6db82bcb2cfd83a638804b7754e3bfcc62c30484ab36fec8fbf4c09cfe3c8a4dd46e13e7fcf70c392550dc2a504165c0256f8555bcb7fcbcdfd8d67a4"}, &(0x7f0000000080)=0x62) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={r5, 0xfff9, 0x10, 0x1f, 0xff}, &(0x7f00000001c0)=0x18) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x53eb02, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000340)="ca9a741aa3feaa791d82add238cec1e226bec0d26cb6c8a872a0580dc181e7b60a20820bfb3b306735e20bcdb7408d2e623686f66882f052fab16d0c17db8f0c1c27e7e5908079981643affc4dba5625c7bf61db8a2a13bb6b08650bfb3a7d5aaf4f121200e1c570da9d4a07250cb6069ff435b5f7ad26fb04571f7389c660baaa00b1c84c50e238d95222296bec6acc839fda130ad6ce8ecc98904aba5a48f8e46f667d3bd0a48d5d9b2e9751d19cc85b7b48c25fa05640bc66016d0136f6261d7bd033425be310e1a6f2a5ae43b6da5aed9eaf6ae6fc828aea8ddda18fbab1eb1e8502485b980d8cf8e3ff99bc86364aa6b7b49ceb4b") ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f0000000280)={0x5, 0x7f, 0x2}) 09:26:30 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tran+=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 515.907794][ T813] blk_update_request: I/O error, dev loop0, sector 520 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 09:26:30 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000000)={0x56, 0x90af, 0x7ff, 0x3, 0x7463d3156fef95b0, 0x9d7}) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:31 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tran-=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:31 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000000)={0x7, {0x0, 0x6, 0x10000, 0x401}, {0x4, 0x0, 0x10001, 0x7}, {0x0, 0xd2}}) 09:26:31 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tran.=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:31 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:31 executing program 5: r0 = epoll_create1(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000480)='./bus\x00', 0x404701, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) r2 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r2) r3 = perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9cc, 0x10001}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)) r6 = syz_open_pts(r5, 0x0) dup3(r6, r4, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r8 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r8, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r7, r7, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r7, 0x4c01) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) r9 = fcntl$dupfd(r3, 0x0, r8) r10 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r10, &(0x7f0000000440)=ANY=[@ANYBLOB="56d88b7081bb388d5b16ab66bdd3ee79f3f56317c5abbf94dc42b6c9080000007e61adb5b3"], 0x1) ioctl$UI_SET_MSCBIT(r10, 0x40045568, 0x12) r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x20) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r11, 0x0) setsockopt$inet6_udp_encap(r11, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r12}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c00adda"]) statx(r9, 0x0, 0x0, 0x800, 0x0) 09:26:31 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tran/=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:31 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585609, &(0x7f0000000300)={0x0, 0xd}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xffffff81}]) 09:26:31 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tran0=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:31 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:31 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranA=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:31 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranD=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:31 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x96, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x800c7f36da55a2fd) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x100000000000022a, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000400)=ANY=[@ANYPTR], 0x8) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:31 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) write$FUSE_DIRENT(r2, &(0x7f0000000100)={0x58, 0x0, 0x3, [{0x1, 0x40, 0xa, 0x1, '/dev/cuse\x00'}, {0x2, 0x9, 0x1, 0x1, '-'}]}, 0x58) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:31 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranI=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:32 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranL=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:32 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:32 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranQ=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:32 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40002, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000100)=0x5) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) r4 = getuid() ioctl$TUNSETOWNER(r3, 0x400454cc, r4) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0xfffff7ff, 0x80]) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xffffff81}]) 09:26:32 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranR=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:32 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="74726166733d66642c720bad6e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:32 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:32 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranS=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:32 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranT=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:32 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_CAPBSET_READ(0x17, 0x3) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x20, r5, 0xf07, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000001a80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000005640)=ANY=[@ANYBLOB="608cc200", @ANYRES16=r5, @ANYBLOB="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"], 0x260}, 0x1, 0x0, 0x0, 0x4004}, 0x2c000070) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) clock_gettime(0x0, &(0x7f0000002280)={0x0, 0x0}) recvmmsg(r6, &(0x7f0000002140)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/19, 0x13}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/212, 0xd4}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000001440)=""/231, 0xe7}], 0x5, &(0x7f0000001540)=""/14, 0xe}, 0x8}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001580)=""/133, 0x85}, {&(0x7f0000001640)=""/247, 0xf7}, {&(0x7f0000001740)=""/2, 0x2}, {&(0x7f0000001780)=""/190, 0xbe}, {&(0x7f0000001840)=""/184, 0xb8}], 0x5, &(0x7f0000002640)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000001980)=@alg, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000002300)=""/148, 0x94}], 0x1, &(0x7f0000001b00)=""/197, 0xc5}, 0x9}, {{&(0x7f0000001c00)=@generic, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001c80)=""/110, 0x6e}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/120, 0x78}, {&(0x7f0000001d80)=""/26, 0x1a}, {&(0x7f0000001dc0)=""/73, 0x49}, {&(0x7f0000004640)=""/4096, 0x1000}], 0x6}}, {{&(0x7f0000001ec0)=@tipc=@id, 0x80, &(0x7f0000002040)=[{&(0x7f0000001f40)=""/115, 0x73}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x2, &(0x7f0000002080)=""/134, 0x86}, 0x4}], 0x5, 0x2041, &(0x7f00000022c0)={r7, r8+10000000}) sendto$rose(0xffffffffffffffff, &(0x7f0000000000)="a7b1b83b8fe13aa0d22ed99ead68d03ae594137a4e08c300e69441ca5cd08d8446402d", 0x23, 0x4000c000, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfffffffffffffec1, 0xffffffffffffffff, 0x0, 0x0, r2}]) 09:26:32 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 518.080977][ T963] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 518.164304][ T967] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 518.198324][ T960] blk_update_request: I/O error, dev loop0, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 09:26:33 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranV=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:33 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranX=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:33 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r10 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r10, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r10, 0x200000000) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r11}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:33 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x200, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x154, r4, 0x2ad42a1f9e9f3d13, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4482face}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x33a9608a}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="fe763e3c6aa822f4796c70b095e402f6"}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}]}, 0x154}, 0x1, 0x0, 0x0, 0xbb3cc5a93398d00b}, 0x44000) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="66fe645240e2859110f79ffc2e1850d895d39853a312258cb78f38f47614a08034638c992533631904eb0f1ac9435875f5074e79aad1c6bfec66c83582d51901eb4a0ddc16040c7d5b5b2c0f3254c419255a430a89be165ad7d996dc842651a7ab2d5babe671e4cb4a4a47c68061fddc84f504fcd49ea3e3947bc1d530d9ffccba450dc0370d83a3d6bdbfbfad30bbb50508096665e0bf6a4af13741555abb4138874f3ac905523a1740e06e6497da2b243434a6ac028bab61cc1d6fa4c28f07facf0f9cdbbf217b9ce2f455ebfaacd59fda9b92aebcc46edf0c88d625bf69307526cce75c47e179"], 0x1) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x12) getsockname$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) 09:26:33 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:33 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tran\\=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:33 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranb=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:33 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000080)=0x4b9) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) pipe(&(0x7f0000000000)) 09:26:33 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranc=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:33 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) dup2(r0, r0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:33 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:33 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trand=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:33 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) io_submit(r1, 0x2000000000000097, &(0x7f0000002600)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r3, 0x4) getsockname$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000080)=0x6e) 09:26:33 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trang=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:34 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(0xffffffffffffffff, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:34 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 519.351900][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 519.351909][ T26] audit: type=1804 audit(1574501194.126:949): pid=1038 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1114/bus" dev="sda1" ino=16656 res=1 09:26:34 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranh=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 519.433848][ T26] audit: type=1804 audit(1574501194.176:950): pid=1034 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1114/bus" dev="sda1" ino=16656 res=1 [ 519.578839][ T26] audit: type=1804 audit(1574501194.186:951): pid=1046 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir890914583/syzkaller.zpotNo/1114/bus" dev="sda1" ino=16656 res=1 09:26:34 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x12) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10, 0xfffffffffffffffe, 0x5}, 0x10) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) [ 519.710835][ T26] audit: type=1804 audit(1574501194.256:952): pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/822/bus" dev="sda1" ino=16669 res=1 09:26:34 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trani=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:34 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(0xffffffffffffffff, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 519.739819][ T26] audit: type=1804 audit(1574501194.396:953): pid=1043 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/794/bus" dev="sda1" ino=16640 res=1 [ 519.873886][ T26] audit: type=1804 audit(1574501194.636:954): pid=1081 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/794/bus" dev="sda1" ino=16640 res=1 [ 519.903143][ T26] audit: type=1804 audit(1574501194.636:955): pid=1063 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/794/bus" dev="sda1" ino=16640 res=1 09:26:34 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranl=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 519.967151][ T26] audit: type=1804 audit(1574501194.706:956): pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/823/bus" dev="sda1" ino=16519 res=1 09:26:34 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000400)=ANY=[@ANYBLOB="564c8e525ec36613cc8653e8124d417548b69eb39546f8e595e80dc0ae6702d8bd8f601af999dd41d674cec87681350363a97ce7bcc12e956db54d2c64fb5b6761509aba283660a743ee9edef696eea12520"], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:34 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(0xffffffffffffffff, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:34 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) r4 = fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x21503799905da8d0) r5 = dup(0xffffffffffffffff) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) ftruncate(r6, 0x8200) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r8 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r8, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r7, r7, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r7, 0x4c01) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) io_submit(r3, 0x4, &(0x7f0000000540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1631, r0, &(0x7f0000000000)="70c406a9c4b7971956fe9a2aabcfa58aaca9cc1c5acdd961c3451a", 0x1b, 0x298, 0x0, 0xfa184b0af3c4c6c8}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x9, r4, &(0x7f0000000140)="ffc23b22647d99479175a0f1016f1d217e9095c5a5ec74f41142861d21c06b1c3d911485d7debd10863bfc2a3c3e2b7e6002548deaf0b2f604bb4869169fef9291a60d60e2b4cfd669dc15fbbdd1ed346cf03ed75fccb934a6bf7cbe9b85fb613547698c9e74eaec4cf6a4cbbce46e5f5b678578d6c2d9379cf0be142591f9484131221ca71dce2ed2943e", 0x8b, 0x80000001, 0x0, 0x2, r5}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0xf801, r6, &(0x7f0000000340)="3acb137806bead17c620ffb3ef3d4b559439791b88f72275aebab8bb38fa3e99909bf60659e262e4d7815f5da624679954f290c71241aa45576c735d21133f50da6ca2719d2d603c283aafb1cf8f3be18a20e0946ada9067c8e58fad475e31b1e4eb0a8ad98d328d7b5ea8cac97061e0ec78f1ec772f627bc794deeea3af79e09046d2fdf79cca989a20cb0c3dea588e26e1affad79f3383b668503fed82e2470a200622a73d0e8fdefca5c317678bd112d4217c3dfd092599c756b67f0a0085bcf6a3deccf04bff32f0634a15a7168811c726862d6adaf4ba12c89c965d1bfc4f4a", 0xe2, 0x4, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x882, r7, &(0x7f0000000440)="cf1203691804dbfeef5cb6718c4a4e285e36c76f14df4ce20c2c5a97262e7da0f002984cafec36fdecda726dfc69d476b068c964ce4c881e540652bde7fd88da0a1e597692fa4d9b394692fb241915ec170a6a3d4f8838366d54c930abf60cb4fadbcaee2d5fc88af1c830f32e013926c3b97ad8cea88edbeb73577c67294df2985068559b86017bec057d22ed4d6a57c4e680161767aa78aa10a89aba23b868db6165f266b61d9c010c2440ed2411c9f63ec766f601fe3d52ad5cebf4550f64c1eaa8c62099915b8564021b9c28f02eefcd6b0d2e48237bfe6b5c3a5807cca5318f4ca79ab5e5c7fafe86c4bed95925", 0xf0, 0x6}]) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) 09:26:34 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trano=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:35 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranp=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 520.378390][ T26] audit: type=1804 audit(1574501195.156:957): pid=1099 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/824/bus" dev="sda1" ino=16672 res=1 09:26:35 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranq=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 520.481426][ T26] audit: type=1804 audit(1574501195.166:958): pid=1095 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/795/bus" dev="sda1" ino=16675 res=1 09:26:35 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) syz_open_pts(r2, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:35 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trant=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:35 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x44000) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x7, 0x3, 0x3f2, 0x4, 0x7, 0x7fffffff, 0x1, 0x7, 0x1ff, 0x228c, 0x1, 0x0, 0x10000, 0x400, 0x4, 0x8], 0x3000, 0x200000}) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x145280, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in, @in6=@loopback}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0x158) 09:26:35 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranu=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 520.753702][ T1126] blk_update_request: I/O error, dev loop0, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 09:26:35 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000400)=ANY=[@ANYBLOB="56069b9c9ab5f4c85e6a2250d33c2cc9da932f6baa1501da3df7cb18237bd25c94d8da74441190a51ced89d4aaf5391494eaca4b792867e4c7a3c5acc169b991801c27e58d7a6683dcdce28091ac53851d59004bb4a23e25a81ed7ae26dfab84b8523a54ffc84e5fd00d48d71d331e08038b883ca8365c88a992edcf1e1bc01f122090963470737d21918063c0067b8369f6ec28a1f1dac509da6d84ad34c66226bdde18817a5b11505ab6417c70f877bf62e664b375fdd3124a23057d17ae7bf1403a1bbb576ca7f9c28b28e1feea989600007c190bdb1a23938f1363df90ee63b4f3c71dcc93952aceef2d7dcdf3"], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:35 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranw=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:35 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) syz_open_pts(r2, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:35 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranx=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 521.162748][ T1150] blk_update_request: I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 09:26:36 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'tranz=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:36 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans%fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 521.378789][ T1166] blk_update_request: I/O error, dev loop0, sector 520 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 09:26:36 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r1 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r1) perf_event_open(0x0, r1, 0x4c, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8200) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = syz_open_pts(r2, 0x1a1600) r6 = dup3(r5, r2, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r8 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r8, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r7, r7, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r7, 0x4c01) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) r9 = fcntl$dupfd(r0, 0x0, r8) r10 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r10, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r10, 0x40045568, 0x12) r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r11, 0x0) setsockopt$inet6_udp_encap(r11, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000340)={0x0, 0xffffffffffffffa5, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r12}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:36 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=%d,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:36 executing program 0: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x68, r2, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x1f, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1400, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xa}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x4008080) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r4, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0xffffff81}]) [ 521.571072][ T1189] 9pnet: Could not find request transport: %d [ 521.602532][ T1193] 9pnet: Could not find request transport: %d 09:26:36 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) syz_open_pts(r2, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:36 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=.d,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:36 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x200) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000080)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000100)={0xfe}, 0x1) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) [ 521.778127][ T1202] 9pnet: Could not find request transport: .d [ 521.818329][ T1206] 9pnet: Could not find request transport: .d [ 521.851493][ T1190] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 521.862924][ T1190] buffer_io_error: 374 callbacks suppressed [ 521.862932][ T1190] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 521.877422][ T1190] blk_update_request: I/O error, dev loop0, sector 4 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 521.888816][ T1190] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 521.897277][ T1190] blk_update_request: I/O error, dev loop0, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 521.908487][ T1190] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 521.916995][ T1190] blk_update_request: I/O error, dev loop0, sector 12 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 521.928903][ T1190] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 521.937535][ T1190] blk_update_request: I/O error, dev loop0, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 521.948925][ T1190] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 521.957367][ T1190] blk_update_request: I/O error, dev loop0, sector 20 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 09:26:36 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=/d,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 521.968705][ T1190] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 521.977264][ T1190] blk_update_request: I/O error, dev loop0, sector 24 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 521.988829][ T1190] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 521.997272][ T1190] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 522.005773][ T1190] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 522.014968][ T1190] Buffer I/O error on dev loop0, logical block 9, lost async page write 09:26:36 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 522.087604][ T1212] 9pnet: Could not find request transport: /d [ 522.127381][ T1217] 9pnet: Could not find request transport: /d 09:26:37 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffff81}]) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0x7, 0x0, 0x2, {0x39e, 0xff, 0x1, 0xd1}}) pipe(&(0x7f0000000000)) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x3, r4, 0x1}) 09:26:37 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=\\d,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 522.376538][ T1227] 9pnet: Could not find request transport: \d 09:26:37 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000400)=ANY=[@ANYBLOB="7fc388e7d5b0724a"], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 522.425481][ T1231] 9pnet: Could not find request transport: \d 09:26:37 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:37 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=f\x11,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 522.590583][ T1243] 9pnet: Could not find request transport: f [ 522.668011][ T1246] 9pnet: Could not find request transport: f 09:26:37 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=f%,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 522.814964][ T1254] 9pnet: Could not find request transport: f% [ 522.851067][ T1255] 9pnet: Could not find request transport: f% 09:26:37 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x12) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r8, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:37 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fA,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:37 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x8000) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x100, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r7) r8 = fcntl$dupfd(r0, 0x0, r6) r9 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r9, &(0x7f0000000400)=ANY=[@ANYBLOB="5643f4f11ef142a79335c845cc66ffe0744da406f0d9fc29f466a299346f2d97cacf83e33dc5a95a477ca5925a5bd650a50faedab3880416685b7f52353a64e4694565998a1c4630651d24e6cf29f214a9fbc0baf2203ebc4bd753325633af8c08a5"], 0x1) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x12) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r10, 0x0) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r11}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d229bf40761669609a20c11e2cac58822cc2a098390d708a16a01ca83b1916bfb4551dad161f9e12b09a2cfb3207420ad27b883e5", @ANYRESHEX, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 523.032808][ T1263] 9pnet: Could not find request transport: fA [ 523.047693][ T1267] 9pnet: Could not find request transport: fA 09:26:37 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fD,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 523.226015][ T1274] 9pnet: Could not find request transport: fD [ 523.261605][ T1277] 9pnet: Could not find request transport: fD 09:26:38 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fI,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:38 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(0x0, 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:38 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x11520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 523.462792][ T1283] 9pnet: Could not find request transport: fI [ 523.512613][ T1292] 9pnet: Could not find request transport: fI 09:26:38 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fQ,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 523.658578][ T1299] 9pnet: Could not find request transport: fQ [ 523.709670][ T1301] 9pnet: Could not find request transport: fQ 09:26:38 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(0x0, 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:38 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fR,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:38 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000440)="fae9bc753c19b0053f55ab642b4fe6d64de7d067d24bac5278ec79540e4114aed402c38d5aecd6193bf957c02c29658a9dbdfbd6d8df28c4bff4ee8448cee8cca6fbe56888773584", 0xffffffa1}], 0x10000000000000ec, 0x8) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x100010, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x62, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfd|X=', @ANYRESHEX, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 523.878946][ T1308] 9pnet: Could not find request transport: fR [ 523.901387][ T1311] 9pnet: Could not find request transport: fR 09:26:38 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fS,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:38 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(0x0, 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 524.076757][ T1319] 9pnet: Could not find request transport: fS [ 524.097885][ T1320] 9pnet: Could not find request transport: fS 09:26:39 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fT,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 524.243734][ T1328] 9pnet: Could not find request transport: fT [ 524.287451][ T1330] 9pnet: Could not find request transport: fT 09:26:39 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) 09:26:39 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fV,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 524.432573][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 524.432582][ T26] audit: type=1804 audit(1574501199.216:990): pid=1336 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/801/bus" dev="sda1" ino=16519 res=1 [ 524.493819][ T1338] 9pnet: Could not find request transport: fV [ 524.530366][ T1343] 9pnet: Could not find request transport: fV 09:26:39 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fX,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:39 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r3, &(0x7f0000000140)="06ed60d341bf0eb5bec775e436354971766a21ee4f877022fad7aa669a678e0b8ab1fc92cb11000c582c0beb4df05b6403c410ef6272bb4adeab8d58a783f9b5b6849f7dfa526c5bbc2b295ad1d7a4c941eb6b8d57de4cd483e5b275afa18a64a0dd02956335624574162c31c4eb3a752993c76185b866a5d4591e08db662deca1", 0x81) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x835eea269aa0e5b7, 0x8010, r5, 0x3000) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0xd7, 0x0, &(0x7f0000000000)) r7 = syz_open_pts(r2, 0x0) dup3(r7, r1, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r9 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) sendfile(r8, r8, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r8, 0x4c01) ioctl$LOOP_SET_FD(r8, 0x4c00, r9) fcntl$dupfd(r0, 0x0, r9) r10 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="000a0017f5bd5a56690fa7777e944d723e0c46627296bab933c7f27c117df528f80901734f45d29698b0887ffbf6fdf8d62fdb1fc6f929c607c9e447fae5"], 0x1) ioctl$UI_SET_MSCBIT(r10, 0x40045568, 0x12) r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r11, 0x0) setsockopt$inet6_udp_encap(r11, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) [ 524.667614][ T1351] 9pnet: Could not find request transport: fX [ 524.698610][ T1353] 9pnet: Could not find request transport: fX [ 524.704153][ T26] audit: type=1804 audit(1574501199.486:991): pid=1335 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/834/bus" dev="sda1" ino=16561 res=1 09:26:39 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=f\\,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 524.818966][ T26] audit: type=1804 audit(1574501199.546:992): pid=1354 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/802/bus" dev="sda1" ino=16577 res=1 09:26:39 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 524.882488][ T1360] 9pnet: Could not find request transport: f\ [ 524.893029][ T26] audit: type=1804 audit(1574501199.616:993): pid=1357 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/802/bus" dev="sda1" ino=16577 res=1 [ 524.921169][ T1362] 9pnet: Could not find request transport: f\ 09:26:39 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'security$Z'}}, {@pcr={'pcr', 0x3d, 0x3b}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 524.967290][ T26] audit: type=1804 audit(1574501199.616:994): pid=1354 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/802/bus" dev="sda1" ino=16577 res=1 09:26:39 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fb,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 525.060056][ T1370] 9pnet: Could not find request transport: fb [ 525.102805][ T26] audit: type=1804 audit(1574501199.616:995): pid=1350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/802/bus" dev="sda1" ino=16577 res=1 [ 525.169407][ T1378] 9pnet: Could not find request transport: fb [ 525.191797][ T26] audit: type=1804 audit(1574501199.666:996): pid=1358 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/802/bus" dev="sda1" ino=16577 res=1 [ 525.286774][ T26] audit: type=1804 audit(1574501200.026:997): pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/803/bus" dev="sda1" ino=16641 res=1 09:26:40 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fc,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 525.374042][ T1385] 9pnet: Could not find request transport: fc [ 525.413440][ T26] audit: type=1804 audit(1574501200.186:998): pid=1383 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir084325997/syzkaller.zymsCw/803/bus" dev="sda1" ino=16641 res=1 [ 525.430150][ T1389] 9pnet: Could not find request transport: fc [ 525.482664][ T26] audit: type=1804 audit(1574501200.186:999): pid=1365 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211672908/syzkaller.SOCZSx/835/bus" dev="sda1" ino=16577 res=1 09:26:40 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fg,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) 09:26:40 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) creat(&(0x7f0000000440)='./bus\x00', 0x8) r7 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x3ff, 0x10140) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) r9 = fcntl$dupfd(r0, 0x0, r6) r10 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r10, &(0x7f0000000400)=ANY=[@ANYBLOB="577d1d24b129d058090b0000ef3d1f592fcefdaa39ac883bd981f32022f2"], 0x1) ioctl$UI_SET_MSCBIT(r10, 0x40045568, 0x12) r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r11, 0x0) setsockopt$inet6_udp_encap(r11, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r12}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 525.596434][ T1397] 9pnet: Could not find request transport: fg 09:26:40 executing program 1: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 525.675584][ T1399] 9pnet: Could not find request transport: fg 09:26:40 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fi,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}]}}) [ 525.812990][ T1395] print_req_error: 640 callbacks suppressed [ 525.813020][ T1395] blk_update_request: I/O error, dev loop0, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 09:26:40 executing program 5: epoll_create1(0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000400)=ANY=[@ANYBLOB="569073cca71f0ac7583281e91c27507c1cfe3d05535cc8f4"], 0x1) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x12) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r9, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='\x00\x00']) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) [ 526.004438][ T1413] 9pnet: Could not find request transport: fi [ 526.025511][ T1401] ------------[ cut here ]------------ [ 526.042094][ T1414] 9pnet: Could not find request transport: fi [ 526.061571][ T1401] generic_make_request: Trying to write to read-only block-device loop0 (partno 0) [ 526.122025][ T1401] WARNING: CPU: 0 PID: 1401 at block/blk-core.c:800 generic_make_request_checks+0x633/0x1a60 [ 526.132226][ T1401] Kernel panic - not syncing: panic_on_warn set ... [ 526.138827][ T1401] CPU: 0 PID: 1401 Comm: syz-executor.1 Not tainted 5.4.0-rc8-syzkaller #0 [ 526.147422][ T1401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.157487][ T1401] Call Trace: [ 526.160796][ T1401] dump_stack+0x1fb/0x318 [ 526.165171][ T1401] panic+0x264/0x7a9 [ 526.169085][ T1401] ? __warn+0x105/0x210 [ 526.173257][ T1401] ? generic_make_request_checks+0x633/0x1a60 [ 526.179338][ T1401] __warn+0x20e/0x210 [ 526.183334][ T1401] ? generic_make_request_checks+0x633/0x1a60 [ 526.189423][ T1401] report_bug+0x1b6/0x2f0 [ 526.193770][ T1401] ? generic_make_request_checks+0x633/0x1a60 [ 526.199854][ T1401] do_error_trap+0xd7/0x440 [ 526.204377][ T1401] do_invalid_op+0x36/0x40 [ 526.208807][ T1401] ? generic_make_request_checks+0x633/0x1a60 [ 526.214888][ T1401] invalid_op+0x23/0x30 [ 526.219089][ T1401] RIP: 0010:generic_make_request_checks+0x633/0x1a60 [ 526.225775][ T1401] Code: 3c 05 00 00 4c 89 f8 48 c1 e8 03 8a 04 08 84 c0 0f 85 17 14 00 00 41 8b 17 48 c7 c7 73 98 40 88 4c 89 f6 31 c0 e8 8d 5c 14 fe <0f> 0b e9 35 fc ff ff e8 41 c6 41 fe c6 05 b6 55 89 05 01 48 c7 c7 [ 526.245388][ T1401] RSP: 0018:ffff88804ff87510 EFLAGS: 00010246 [ 526.251462][ T1401] RAX: 51efbcd15da46600 RBX: 0000000000000001 RCX: ffff888051ed4640 [ 526.259442][ T1401] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 526.267430][ T1401] RBP: ffff88804ff875d0 R08: ffffffff815cc0f4 R09: fffffbfff12bc2a6 [ 526.275416][ T1401] R10: fffffbfff12bc2a6 R11: 0000000000000000 R12: ffff888098547b88 [ 526.283484][ T1401] R13: 1ffff110130a8f71 R14: ffff88804ff87570 R15: ffff8880a372753c [ 526.291490][ T1401] ? vprintk_emit+0x2d4/0x3a0 [ 526.296193][ T1401] ? rcu_lock_release+0xd/0x30 [ 526.300980][ T1401] generic_make_request+0x33/0x980 [ 526.306116][ T1401] ? rcu_lock_release+0xd/0x30 [ 526.310903][ T1401] submit_bio+0x26b/0x540 [ 526.315252][ T1401] ? wbc_account_cgroup_owner+0x110/0x340 [ 526.321011][ T1401] ? bio_associate_blkg_from_css+0x1c4/0x1d0 [ 526.327013][ T1401] submit_bh_wbc+0x619/0x700 [ 526.331666][ T1401] __block_write_full_page+0x943/0x1070 [ 526.337222][ T1401] ? blkdev_direct_IO+0xd0/0xd0 [ 526.342085][ T1401] ? mark_buffer_write_io_error+0x160/0x160 [ 526.348002][ T1401] block_write_full_page+0x1a4/0x220 [ 526.353307][ T1401] ? blkdev_direct_IO+0xd0/0xd0 [ 526.358173][ T1401] blkdev_writepage+0x24/0x30 [ 526.362862][ T1401] __writepage+0x63/0xd0 [ 526.367122][ T1401] write_cache_pages+0x94a/0xe70 [ 526.372071][ T1401] ? generic_writepages+0xd0/0xd0 [ 526.377127][ T1401] generic_writepages+0x93/0xd0 [ 526.382005][ T1401] blkdev_writepages+0x1d/0x30 [ 526.386783][ T1401] ? blkdev_readpage+0x20/0x20 [ 526.391560][ T1401] do_writepages+0xfb/0x1f0 [ 526.396078][ T1401] ? wbc_attach_and_unlock_inode+0x3f0/0x5d0 [ 526.402075][ T1401] __filemap_fdatawrite_range+0x2c2/0x360 [ 526.407824][ T1401] filemap_write_and_wait+0xca/0x160 [ 526.413129][ T1401] __blkdev_put+0x1a2/0x6d0 [ 526.417654][ T1401] ? __mutex_unlock_slowpath+0x13c/0x5b0 [ 526.423323][ T1401] blkdev_put+0x2c8/0x3b0 [ 526.427674][ T1401] blkdev_close+0x7b/0xa0 [ 526.432022][ T1401] ? blkdev_open+0x2c0/0x2c0 [ 526.436615][ T1401] __fput+0x2e4/0x740 [ 526.440612][ T1401] ____fput+0x15/0x20 [ 526.444606][ T1401] task_work_run+0x17e/0x1b0 [ 526.449213][ T1401] prepare_exit_to_usermode+0x459/0x580 [ 526.454781][ T1401] syscall_return_slowpath+0x113/0x4a0 [ 526.460255][ T1401] do_syscall_64+0x11f/0x1c0 [ 526.464866][ T1401] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 526.470773][ T1401] RIP: 0033:0x4141d1 [ 526.474763][ T1401] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 526.494373][ T1401] RSP: 002b:00007ffc40706ad0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 526.502882][ T1401] RAX: 0000000000000000 RBX: 0000000000000009 RCX: 00000000004141d1 [ 526.510862][ T1401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 526.518932][ T1401] RBP: 0000000000000001 R08: 000000002cf05866 R09: 000000002cf0586a [ 526.527004][ T1401] R10: 00007ffc40706bb0 R11: 0000000000000293 R12: 000000000075bf20 [ 526.534990][ T1401] R13: 00000000000806a2 R14: 0000000000761d58 R15: 000000000075bf2c [ 526.544964][ T1401] Kernel Offset: disabled [ 526.549569][ T1401] Rebooting in 86400 seconds..